Search Results

Feature improvement

Export and Import Workflows with Tags and Description

January 30, 2025

When exporting a workflow, its description and tags are now included, ensuring they remain intact when imported into another workspace.

This enhancement enables seamless transfer of additional workflow details across workspaces, preserving essential information such as categorization and context during exports and imports.

Review Case Investigations

January 30, 2025

Establish a case review process to ensure quality, compliance, and adherence to investigation protocols before taking further actions such as resolution, escalation, or stakeholder updates.

  • Assign reviewers to assess case investigations and approve or reject them.
  • Conduct the review process through the Cases page or automate it with the provided steps and Torq Cases trigger scenarios.

To get started, enable the Case review setting on the Cases settings page.
Once a reviewer is assigned, their icon appears next to the case assignee's icon. When a review conclusion is provided, the verdict replaces the reviewer’s icon, ensuring clarity and immediate visibility.

Automate Responses to Workflow Publish/Unpublish Events

January 12, 2025

Automatically manage workflow publishing and unpublishing using the new System Events trigger scenarios:

  • Workflow published
  • Workflow unpublished

For example, you can automate notifications to stakeholders to ensure compliance, prevent errors, and enhance collaboration.

More information is available in our knowledge base.

New content

Content Digest

January 06, 2025

We've introduced new integrations for Clutch Security, CrowdStrike Identity Protection, and NetBox, along with new steps for existing integrations. For full details, check out the complete digest.

Improvement

Create Tables from JSON

December 30, 2024

You can now create table workspace variables by specifying the table columns in JSON format. This approach enables dynamic table schema definition, either by retrieving it from existing tables or a centralized source such as a workspace variable.
For example, this option is helpful for replicating tables across workspaces.

Use the Create a Workspace Variable step, switch to JSON mode, and specify the table schema using one of these methods:

  1. From Workflow Context: Define the table schema using the workflow context, such as the output from a previous Get a Workspace Variable step that was used to retrieve the schema of an existing table.
  2. Custom JSON Format: Manually specify the table schema in JSON format.

More information is available in the knowledge base.

Improvement

Resolve Conflicts During Workflow Import

December 25, 2024

When importing a workflow with nested workflows into your workspace, conflicts may arise if workflows with identical names already exist. You can now choose Override original alongside other conflict resolution methods:

  • Keep original: Retain the existing workflows as they are. The imported workflow is added as a duplicate, referencing existing nested workflows.
  • Override original: Replace the existing workflows with the imported versions.
  • Duplicate: Create duplicates of any nested workflows and update the imported parent workflow to reference the duplicates.

Automate imports using the Import a workflow step, which defaults to Keep original for conflict handling. Add the Conflict handling mode optional step parameter to select Override original or Duplicate.

For more details, refer to our Knowledge Base.

Case Management

See Who’s Viewing a Case

December 09, 2024

Gain real-time visibility of users actively viewing a case, available in both the case quick and expanded views. When incidents require teamwork, knowing who is actively engaged with a case enhances coordination and reduces duplicated efforts. Real-time visibility of case viewers fosters better collaboration, ensures timely communication, and leads to faster, more efficient case resolutions.

New content

Content Digest

December 02, 2024

We've introduced new integrations for Autotask, Jamf Protect, SecurityScorecard, and Wazuh, along with new steps for existing integrations, various enhancements, and new templates. For full details, check out the complete digest.

New content

Content Digest

November 12, 2024

We've introduced new integrations for Cyera, FIRST, and SSLLabs, along with new steps for existing integrations, various enhancements, and new templates. For full details, check out the complete digest.

New feature

Find Unique Events with Torq's New Operator

November 12, 2024

Want even more streamlined automation? Use Torq's new Deduplicate Operator! Effortlessly handle burst events, recurring reports, repeated indicators, and more without clogging up your workflows.

The Deduplicate Operator automatically identifies and processes duplicate entries across workflow executions, based on your specified criteria and time range. The operator helps avoid repetitive input, allowing you to consolidate repeated trigger events, prevent duplicate case creation, streamline records, and more!

Say goodbye to data clutter and hello to a cleaner, more powerful automation experience with Torq!

Case Management

Configure Torq's HyperSOC: 3 Additional Settings

November 07, 2024

Case management settings are now centralized in the Settings > Cases page, simplifying customization to align with your organization’s specific needs.

We’ve introduced three new settings:

  • Categories: Manage categories for accurate case classification.
  • Resolution Reasons: Manage the reasons analysts can specify when resolving or closing cases.
  • States: Create custom states and edit the default ones for accurate tracking.

More details can be found in our knowledge base.

Feature update

Import or Export Workflows with Custom Steps

October 08, 2024

As all workflow builders know, building custom steps with Torq's Step Builder (and other customizing options) is an innovative and flexible way to meet your organization's specific needs. Now, when importing and exporting a workflow containing custom steps or integrations, those steps/integrations will also be added and available within the destination workspace.

New content

Content Digest

October 07, 2024

We've introduced new integrations for Absolute Software, Check Point Harmony Mobile, EchoTrail, Gytpol, incident.io, IOCParser, Mitiga, oomnitza, Polarity, PostgreSQL, Pulsedive, and TruSTAR, along with new steps for existing integrations, various enhancements, and new templates. For full details, check out the complete digest.

Case Management

Cases Notes Improvements

October 01, 2024

We've enhanced the notes experience in cases with these updates:

  • Increased character limit to 65,000.
  • Added easy image resizing with aspect ratio preservation and an option to view images at full size.

More information about notes in cases is available in our knowledge base.

New feature

Transform Your Data with Torq's New Operator

September 29, 2024

Introducing the Data Transformation Operator! Processing large amounts of data to create consistent and navigable output can be overwhelming, so Torq's Data Transformation Operator is here to help! Give instructions in natural language to generate JQ code on any JSON input.

Data Transformation supports mapping and extraction, converting data types, math functions, and more! As with all Torq operators, its use is intuitive for builders of all levels - coders and non-coders alike.

So what are you waiting for? Go transform your data - and your automations - now!

If you do not see the new Data Transformation operator, it may be because your organization opted out of Torq AI features. Please contact Torq support if you have not opted out and still do not see the feature.

Case Management

Configure Torq's HyperSOC

September 25, 2024

Case management settings are now centralized in the Settings > Cases page, simplifying customization to align with your organization’s specific needs.

Available settings (with more coming soon) include:

  • Auto Refresh: Adjust the auto-refresh interval for the Cases page.
  • Public Notes/Comments: Enable the option to mark notes and comments as public.

More details can be found in our knowledge base.

New feature

Create Portals with Torq Interact: Links

September 22, 2024

Torq Interact has just expanded its capabilities! Now, you can create a portal interface for your internal organization end users. Easily present users with a seamless interface to access and execute Torq Interact workflows. Enhance operational efficiency by leveraging cross-organizational portals for streamlined, automated actions and real-time data access.

Follow this How-To and create your Portal today!

New feature

Torq’s Service API Key: Unlock Secure and Consistent Access

September 19, 2024

Create a Service API key to eliminate your workspace's reliance on user presence. Private API keys are liable to break should a user be removed from a workspace. This is solved by introducing Service API keys, which are associated with the workspace they belong to, not to any one user, and created by an Owner of the workspace.

The process is simple: go to your API key page and toggle from Private to Service. Pick the appropriate role for the key's access level, and click Create. The API key will now be accessible for any workflow within the workspace and will not break even if the creating user is removed.

Improvement

Use AI for Step Parameter Population

September 17, 2024

We've added a Generate with AI input field for CLI, scripting, and data manipulation steps.

Simply enter a natural language description of the desired action (e.g., AWS list running workspaces) and let AI fill in the relevant step input fields.

For more details and a complete list of supported steps, visit our knowledge base.

Case Management

Manage Permissions for Case Deletions

September 17, 2024

We've introduced a new RBAC scope, cm.case.delete, allowing you to create custom roles without case deletion permissions.

By contacting Torq support, you can create a custom analyst role without deletion permissions, ensuring only authorized team members can delete cases.

All Torq roles with case management write access have been updated to include this new scope, ensuring they retain their previous abilities without any changes.

For more details on roles and scopes, visit our Knowledge Base.