Salem Cyber Doc Site
  • 🏠Documentation Home
  • ✨Initiation Guides
    • Quickstart: Deploy Salem
    • Admin Guide
    • Installing Teams App
    • Feature Overview
  • ✨General Guides
    • Managing Alerts
    • Managing Questions
    • Threat Notification Management
    • Uploading Files
    • Logical Operations
  • ✨Configurations Specification
    • Configuration Home
    • Action Conf
      • "match" ActionConfs
      • "webhook" ActionConfs
      • "llm" ActionConfs
    • Action Definition
      • Azure Log Analytics
      • Microsoft Graph API
      • Splunk Search
      • Bring Your Own LLM
    • Parsing Conf
      • Summary Details
    • Report Conf
    • LLM Configuration
  • 💾Changelog
    • Dec 5th '24: Get cracking on your holiday shopping list
    • July 18th, ’24: Beat the heat and the hackers
    • Apr 17th, '24: Alert showers make analysts sour... no longer with Salem!
    • Mar 5, '24: They're after me (and your) secure systems! We're na-tur-ally suspicious
    • Jan 31, '24: New year, new me... and a new way to extract data from your alerts
    • Dec 21, '23: Jingle bells, WannaCry smells, your escalated alert just laid an egg
    • Nov 14, '23: Stuff the turkey or stuff cyber alerts with context... Why not both?
    • Oct 25, '23: Llama, llama on the wall which alert is scariest of them all
    • Sept 19, '23: Context building via true positive/false positive workflow
    • Sept 1, '23: Alert report UI, webhook actions, and question upgrades
Powered by GitBook
On this page
  • Question Management
  • Viewing Question Metrics
  • Viewing All Questions and Filtering
  1. General Guides

Managing Questions

PreviousManaging AlertsNextThreat Notification Management

Last updated 11 months ago

Questions are the backbone that keeps Salem's world spinning. Salem needs these to learn what to alert the user about.

Clicking the "Help Salem Learn" button will bring up the question card menu. Depending on the question received, you should be able to answer accordingly.

Note: Admin users do have custom questions assigned to them, and as such, will experience a similar, although differing, experience.

Behind the scenes, Salem uses this information to better counter-act cyber-terrorism. It's always best to have an eye out!

From the metrics card, you'll be able to see the amounts of questions and answers asked.

Simply click the "Actions" and then "Metrics" from the main menu. Impossibly easy!

Questions can be filtered in a similar way to alerts through the admin menu. The option can be found under "Actions" in the admin menu.

  1. Clicking the previously stated button will open a few options: ✦ All the Above must be removed to add any filters. ✧ Consummation declares whether a question is unanswered or not. ✦ Type declares the type of question. Currently, there are eight questions. ✧ Role declares the role associated. ✦ If no filter is selected, including "All of the Above", the filter simply will not be used.

  2. Clicking "Filter Questions" will enable the filters.

✨
Question Management
Viewing Question Metrics
Viewing All Questions and Filtering