Skip to content
Reports in Security Incident Response › Working with Security Incident Records › Use › Security Incident Response Workspace › Security Incident Response › Enterprise security case management applications › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Edit a report

Analysts can modify an unpublished report in Security Incident Response and share it via email.

Before you begin

Role required: sn_si.analyst

Procedure

  1. Navigate to Workspaces > Security Incident Response Workspace.

  2. Open a security incident.

  3. Select Reports.

    The Report page displays a list of all the reports created for the selected incident.

  4. Open the report to update.

    The report opens in edit mode with the incident data as configured in the template.

  5. Edit the report as required.

  6. Select Preview to view a preview of the report.

  7. Select Save Content to save the changes.

  8. Select the edit report details icon to update the report name and description.

  9. Select Publish to publish the report.

  10. Select the share report in email icon

Image omitted: share-report-icon-sir.png
.
1.  Enter the recipient’s emails in the **To** and **Cc/Bcc** fields.

2.  Update the email **Subject and Email Body**.

3.  Select **Send** to share the report over email.

Parent Topic:Reports in Security Incident Response