What is a one sentence summary of your feature request?
Allow users to distinguish clearly between system-generated “Status Change Comments” and user-entered “Typewritten Comments” in the Threat Manager interface.
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
In Threat Manager when a user changes the status of a threat, the comment icon appears on the threat management screen.
The comment icon should either, only appear when a user actually enters a typewritten comment (the way it used to work) or should have a different appearance to signify that there’s a “real typewritten comment” on the threat.
The way our team works is we change the status of every threat to track that it’s either false positive, resolved or being investigated. We frequently type in comments on the threats (e.g. User changed password and forgot to change on their iPad causing failed authentications”. The way the application is currently configured, every threat has a comment icon when the status is changed making it impossible to see threats where our operators actually entered a comment.
We would like to be able to distinguish between “Status changed comment” and “Typewritten Comment” Perhaps the existing outline icon for status changed and blue filled in comment icon for a typewritten comment or something like that.
Honestly, since we can see the threat status on the screen and even filter by status, I don’t see the reasoning behind having the comment icon when the status is changed (although I know that another customer might have requested this). Another option might be to make the “status change comment” an option that can be turned on or off.
How do you currently solve the challenges you have by not having this feature?
Currently, there’s no effective workaround: all status changes automatically trigger the comment icon.