Skip to main content

MSSP Incidents

The MSSP Incidents view provides a centralized incident management interface across all customers — enabling efficient monitoring, triage, and response without switching between individual customer consoles.

Accessing MSSP Incidents​

From the left navigation menu, click MSSP View → Incidents.

Overview​

The MSSP Incidents view aggregates incidents from all managed customer tenants into a unified, filterable list. MSSP analysts can view, triage, and escalate incidents across all customers without needing to switch tenant context.

Features​

Unified Incident Feed​

All incidents from all customer tenants appear in a single, time-ordered feed. Each incident row shows:

  • Customer — Which tenant the incident belongs to
  • Module — DarkFlash, BrandSafe, or ShadowSpot
  • Title — Incident description
  • Severity — Critical, High, Medium, Low
  • Status — Open, In Progress, Closed
  • Created — Detection timestamp

Filter the cross-tenant incident feed by:

FilterOptions
CustomerSelect one or multiple customers
ModuleDarkFlash, BrandSafe, ShadowSpot
SeverityCritical, High, Medium, Low
StatusOpen, In Progress, Closed
Date rangeCustom date range

Incident Triage​

Click any incident to open the full detail view for that incident within the context of its customer tenant. From the detail view, MSSP analysts can:

  • Review full incident context and evidence
  • Update incident status
  • Add investigation notes
  • Generate incident reports

Cross-Customer Threat Correlation​

The MSSP Incidents view enables correlation of similar incidents across multiple customers — for example, identifying when the same phishing domain or threat actor is targeting multiple managed organizations simultaneously.

Reporting​

Generate incident reports for individual customers or across all customers from the MSSP Incidents view:

  • Per-customer Executive Summary — Risk overview for a single customer
  • Per-customer Incident Details — Full technical report for a single customer
  • Consolidated Report — Aggregated overview across all managed customers

→ MSSP Dashboard