Performing Threat Analysis using Cisco SecureX Ribbon

Note	When you upgrade from Security Management Appliance 13.6.1 or earlier versions, Casebook will be part of the Cisco SecureX Ribbon.

Cisco SecureX supports a distributed set of capabilities that unify visibility, enable automation, accelerate incident response workflows, and improve threat hunting. These distributed capabilities are presented in the form of applications (apps) and tools in the Cisco SecureX Ribbon.

This topic contains the following sections:

• Accessing the Cisco SecureX Ribbon

• Adding Observable to Casebook for Threat Analysis using Cisco SecureX Ribbon and Pivot Menu

You will find the Cisco SecureX Ribbon at the bottom pane of the page, and it persists as you move between the dashboard and other security products in your environment. Cisco SecureX Ribbon consists of the following icons and elements:

• Expand/Collapse Ribbon

• Home

• Casebook App

• Incidents App

• Orbital App

• Enrichment Search Box

• Find Observables

• Settings

For more information on Cisco SecureX Ribbon, see https://securex.us.security.cisco.com/help/ribbon.