Allow Notes on Attachments

I would like to have, if possible, the chance to create notes in attachments the same way I can create a note in a Task or Artifact.

This way, if I am doing an analysis of a file I can be adding the information in a note and if in a future I need to create a report from that attachment, I only need to look for the notes of that specific attachment.

Another improvement could be adding the information you get from the artifacts regarding an attachment into that attachment notes.

The main reason is to have, as I said, all information regarding an attachment together in one place.

Those notes could also appear in the notes tab as task notes do, something like: 
User ABC added a note to the attachment XYZ

  • Guest
  • Mar 31 2018
  • Future consideration
  • Attach files
  • Guest commented
    3 Nov, 2020 10:52pm

    Discussion would best, but if it helps to get this sooner, a description field would go a long way already

  • Admin
    MARTIN FEENEY commented
    3 Nov, 2020 10:45pm

    Hi J,

    I'm afraid to report there are no near term plans for this idea.

    Question, would adding a single description field be of use, or is the real value in the notes like discussion ?

    Cheers,

    Martin

  • Guest commented
    3 Nov, 2020 03:53pm

    This is years old and has quite a few upvotes. Still not planned for future release?

    Is this this a good idea? Or not? How is one supposed to work on more complex incidents without this feature and keep the overview?

    I would whish for some feedback from the product team.

  • Guest commented
    10 Jul, 2020 08:29am

    Badly needed!

  • Guest commented
    20 Nov, 2019 10:24am

    Yes! Overall the attachment and artefacts section needs improvement.

     

    How about:

    - Description field (what is this attachment about)

    - Comments section (similar to notes)

    - Automatic hash calculation of each file

    - Three checkboxes: "analysis complete" (yes/no), "malicious" (yes/no), "deprecated" (yes/no)

    - Optional actions provided by Resilient based on filetype: CSV - parse and create artefacts (including a wizard in the gui), picture (add to notes, asking for description), hash (lookup at virus total)

  • Guest commented
    18 Apr, 2019 02:26pm

    This would be my second choice.

  • Guest commented
    11 Apr, 2019 05:40pm

    Definitely see a lot of value in this. Provides context to our attachment uploads. 

  • Guest commented
    21 Aug, 2018 02:52pm

    The basic need for us is to be able to give a short description of the Attachment.  Now you can just drop it on a task/incident, no comment possible.   The next is to be able to add a note on the attachment, when you are working on it, doing analysis.  Might be that both requirements can be combined.

  • Guest commented
    3 Jul, 2018 10:53am

    We created ticket 6147 in July 2017 to request something very similar.

    Users have also asked for one or more flags on Attachments and Artifacts to define degree of danger, confidentiality and so on, with logic to control access to users selectively (confidentiality) and warn of dangerous content as appropriate.

  • Guest commented
    27 Apr, 2018 07:57pm

    Yea, notes would be great. Or have tasks and artifacts linked and display linked artifacts in the task and the task notes in the linked artifacts.