diff --git a/README.md b/README.md index e5720c4..7305770 100644 --- a/README.md +++ b/README.md @@ -26,59 +26,62 @@ They represent alerts, incidents, forensics investigations, threat hunts or any other event you want to handle in your organisation.
- - Screenshot of a ticket + + Screenshot of a ticket
-### Ticket Types - -Templates define the custom information for tickets. -The core information for tickets like title, creation date or closing status is kept quite minimal -and other information like criticality, description or MITRE ATT&CK information can be added individually. - -### Timelines - -Timelines are used to document the progress of an investigation. -They can be used to document the steps taken during an investigation, the findings or the results of the investigation. - ### Tasks Tasks are the smallest unit of work in Catalyst. They can be assigned to users and have a status. Tasks can be used to document the progress of an investigation or to assign work to different users.
- - Screenshot of the tasks part of a ticket + + Screenshot of the tasks part of a ticket
+### Reactions + +Reactions are a way to automate Catalyst. +Each reaction is composed of a trigger and an action. +The trigger listens for events and the action is executed when the trigger is activated. +There are triggers for HTTP/Webhooks and Collection Hooks and actions for Python and HTTP/Webhooks. + +
+ + Screenshot of the reactions + +
+ +### Timelines + +Timelines are used to document the progress of an investigation. +They can be used to document the steps taken during an investigation, the findings or the results of the investigation. + +### Dashboards + +Catalyst comes with a dashboard that presents the most important information at a glance. + +
+ + Screenshot of the dashboard + +
+ +### Ticket Types + +Templates define the custom information for tickets. +The core information for tickets like title, creation date or closing status is kept quite minimal +and other information like criticality, description or MITRE ATT&CK information can be added individually. + ### Custom Fields Custom fields can be added to tickets to store additional information. They can be used to store information like the affected system, the attacker's IP address or the type of malware. Custom fields can be added to ticket types and are then available for all tickets of this type. -### Dashboards - -Catalyst comes with a dashboard that presents the most important information at a glance. - -
- - Screenshot of the dashboard - -
- -### Webhooks - -Catalyst can send webhooks to other systems. -This can be used to trigger actions in other systems and create automated workflows. - -### Users - -Catalyst supports authentication via username and password -or via OAuth2 with an external identity provider like Google, GitHub or GitLab. - ### More Catalyst supports a lot more features like: Links, Files, or Comments on tickets. \ No newline at end of file diff --git a/docs/screenshots/dashboard.png b/docs/screenshots/dashboard.png index ad7072e..f475efe 100644 Binary files a/docs/screenshots/dashboard.png and b/docs/screenshots/dashboard.png differ diff --git a/docs/screenshots/reactions.png b/docs/screenshots/reactions.png new file mode 100644 index 0000000..cb68310 Binary files /dev/null and b/docs/screenshots/reactions.png differ diff --git a/docs/screenshots/tasks.png b/docs/screenshots/tasks.png index 08f9cd6..65e3120 100644 Binary files a/docs/screenshots/tasks.png and b/docs/screenshots/tasks.png differ diff --git a/docs/screenshots/ticket.png b/docs/screenshots/ticket.png index b6b8525..37041c2 100644 Binary files a/docs/screenshots/ticket.png and b/docs/screenshots/ticket.png differ