Kaspersky Managed Detection and Response

Processing responses to incidents in MDR Web Console

20 May 2024

ID 257908

You can view, accept, and reject responses to incidents.

To view responses to an incident:

  1. In the MDR Web Console window, navigate to the Incidents menu item.

    The incident list opens.

  2. Click the string with the incident whose details you want to view.

    The incident page opens.

  3. On the incident page, click the Responses tab.

    The response list opens.

    Each line represents one response. The following information about the response is displayed:

    • Status

      Status of the response.

    • Asset ID

      Identifier of the asset for the response to be executed.

    • Type

      Type of the object that makes up the response.

    • Parameters

      OS-specific local path to get the response file and expected file size in MB. The maximum file size is 10 MB.

    • Comment

      Last comment to the response.

    • Changed by

      Last user who modified the response description.

To view the response description, click on the string with the response.

To accept or reject responses to an incident:

  1. In the Console window, navigate to the Incidents menu item.

    The incident list opens.

  2. Click the string with the incident whose details you want to view.

    The incident page opens.

  3. On the incident page, click the Responses tab.

    The response list opens.

  4. Select a response that you want to approve or reject by selecting the check box at the left end of the string that contains response.

    You can also select several responses by selecting their check boxes at the left. To select all responses, select the check box at the left part of response table heading.

  5. To approve or reject a response or responses, select either the Accept or Reject button located below the response list. The comment box appears. Enter your comment, and then click the Send button.

    You can also click a response on the Responses tab to check its details and either accept or reject it in the side pane that appears. To reject the response, you have to enter your comment in the field on the side pane.

The response status is changed.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.