26.5 Documenting a Solution Pack

The Solution Designer provides three different categories of documentation to help you create the documentation for the Solution Pack you are creating.

26.5.1 Description

Allows you to provide a detailed description about the Solution Pack for your users.

26.5.2 Implementation Steps

Lets you add the steps required to implement the content in the target Sentinel system to the Implementation tab of the Documentation panel. The steps might include instructions for the following types of implementation actions:

  • Populating a .csv file that is used by the mapping service for event enrichment.

  • Scheduling automatic report execution

  • Enabling auditing on source devices.

  • Copying an attached script for an Execute Command Correlation Action to the appropriate location on the correlation engines.

After the content implementation, the content should be tested to verify that it is working as expected.

26.5.3 Testing Steps

Lets you add the steps required to test the content in the target Sentinel system to the Testing tab of the Documentation panel. The steps can include instructions for the following types of testing activities:

  • Running a report and verifying that data is returned.

  • Generating a failed login in a critical server and verifying that a correlated event is created and assigned to an iTRAC workflow.