↳ GitHub sourceWorkbook

Incident Tasks Workbook

Description

Use this workbook to review and modify existing incidents with tasks. This workbook provides views that higlight incident tasks that are open, closed, or deleted, as well as incidents with tasks that are either owned or unassigned. The workbook also provides SOC metrics around incident task performance, such as percentage of incidents without tasks, average time to close tasks, and more.
Version
1.1.0
Declared author / publisher
Microsoft

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
IncidentTasksWorkbook
Additional source files 2Workbooks/IncidentTasksWorkbook.jsonsource ↗Workbooks/WorkbooksMetadata.jsonworkbook-metadata ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 17:57 UTC

GSTEP sync dates, separate from the source content’s publication dates.