Notifications
If you set a notification destination for a scenario, a notification will be sent when the scenario is triggered. For information on setting the notification destination, see Recipient settings. By performing various actions from notifications, you can quickly understand the current state of assets. For example, you can transition from notifications to various StageCrew pages, such as comparing assets with past states, creating threads for analysis, and transitioning to URLs set for assets. After receiving a notification, you can also avoid the trouble of searching for the contents of the notification in StageCrew. The layout and appearance of notifications will change depending on the notification destination, but the notification content will generally be the same.
The notification content will be explained using the following scenario settings as an example.

Scenario name
Test Scenario
Scenario type
Periodic execution
Lookup settings
AbuseIPDB and Google are configured
Notification destination
Teams and Email are configured
Notification Content
The example below is a sample screen when a notification is received in Teams using the Webhook function.

Notification Header

Subject
It will be stated that it is a notification from StageCrew, scenario type and scenario name are also included.
Triggered
The date and time the scenario was executed.
Description
The scenario type and the scenario name are included.
Actions executable from the notification

View Alert
If the scenario was triggered by an alert, you will be taken to the alert history page.
Open All
You can jump to the assets set in the scenario.
Download
You can download screenshots taken, in case screenshots was enabled in the scenario configuration.
Compare
You will be taken to a screen where you can compare the most recently taken screenshot image with screenshot images taken in the past. From the notification the same information can be viewed by one click as when you select the most recently executed scenario from the history page of each scenario. In the case of the example scenario, since the scenario type is a scheduled execution, the same information can be viewed with one click as when you move to the information comparison page from the scheduled execution event history.
Create a Thread
Create a thread based on the most recent screenshot. For more information on the thread features, see the Threads page.
Lookup Group Name and Lookup Title Name

By clicking on the lookup title, you can switch to the lookup target registered in the scenario. If you have configured screenshot to be attached to the notification, a screenshot image will be attached at the bottom of the notification.
最終更新