Incident Feedback is a new Spinbackup feature, that allows G Suite administrators to provide feedback on whether the cybersecurity event was identified and classified correctly by the Spinbackup machine learning algorithms. G Suite administrators can triage cybersecurity events, that are captured in the Domain Audit dashboard and mark decisions based on the actual event. This serves two purposes – to remediate any false positives and to tweak the machine learning algorithms, used to classify similar cybersecurity events.
Spinbackup Incident Feedback Overview
To navigate to the Incident Feedback configuration, you navigate to the Domain Audit Dashboard. To find the Domain Audit Dashboard, from the main Spinbackup Dashboard navigation, under Cybersecurity click on Domain Audit. A new column, called Status, appears to the right of the Domain Audit dashboard.
By clicking on the Status field “New” hyperlink, an Incident dialog box opens. It gives G Suite administrators the ability to classify the new event.
Event Classification:
- New – The event is a correct identification of a new threat to the G Suite organization
- False Positive – The event was incorrectly identified as matching a cybersecurity rule set
- Resolved – The scenario, leading up to the event classification, has been remediated
G Suite administrators can also add a Message regarding the new event classification. This allows any additional details, either technical or others, to be added to the event classification.
