dfir-iris
[FR] Make comments on tasks more obvious
We're trying out IRIS and are modeling/testing processes. I think its important to note that we're looking into handling SOC "standard" incidences and less major externally driven ones.
Is your feature request related to a problem? Please describe. Currently comments on tasks are not obvious, unless you open a specific task. In our current modeling we think that tasks are often finished without a comment. Comments would be made if something out of the ordinary or noteworthy happened. In the tasks overview (/Case/tasks) these are not visible, you would have to click each task to figure it out
Describe the solution you'd like We're uncertain what would be a good solution and are interested in other peoples experiences. Considering #550, I think it would be good if the task representation in the timeline has the speech bubble with a number indicating comments on that task. If I'd make myself familiar with a case I would look first into the timeline.
Describe alternatives you've considered An additional column in the task view, with the comment count. Or an icon indicating the existence of comments.
Maybe the comments on alerts are the wrong place all together, and it should be an entry directly to the timeline? (Consider #294 for streamlining this).
Hi IRIS Team,
Thanks for this amazing tool, first of all !
Regarding this enhancement, I also think it can be a good idea. When you create a task and/or modify it, it should be reflected on the timeline since these are "changes" or "updates" on the case. From my point of view, the timeline should help to see what happens on a case, from beginning to the end.
Maybe this can be a separate view of the timeline with all the elements created/modified in the case ?
