Hi again Metron community. Sorry to post another question in such quick succession.
Our client has asked us to implement another use case on the Metron instance we have set up for them. This new use case uses similar data to the original use case but the threat triage rules for scoring the records are very different. The request was to have another tab in the Alerts UI so that the different SOC analysts could use different screens for the different use cases. Is there any way to configure this? And if not, does anyone in the community have suggestions on how to approach this? Thanks in advance for the help.
