[FR] User-Friendly Task Template Creation Feature

[omarix]

Hi,

I'd like to request a feature for a more user-friendly way to create and manage task templates in IRIS DFIR. Currently, creating a template involves writing it in JSON, which can be cumbersome and error-prone, especially for users not familiar with JSON format.

I propose adding a GUI-based approach where users can:

Create a task as usual through the interface.
Have an option to "Save as Template" in the task creation/editing interface.
Name and optionally describe these templates.
Access and use these saved templates easily when creating new tasks.

This feature would significantly streamline the task setup process, making IRIS more accessible and efficient for all users, without the need to manually edit JSON files.

Thank you for considering this enhancement!

Regards.

[whikernel]

Hi @omarix

Thanks for the FR! You are referring only to tasks in the templates, but case templates are wider than that. They cover notes, summary etc. Are you thinking of having templates only for tasks, or have a UI for the whole case template?

Cheers

[59e5aaf4]

Hi, we'd as well like task templates. We don't really care about the UI, but anything better than having to copy-paste text blobs would be good. Phantom (now Splunk SOAR) workbooks had a great UI for that.

• "Add new host" would have a checklist of items
• "Add new user" as well
• "Prepare report" etc.

In a ideal world, a single-click button adding a "investigate host XYZ" task on new asset creation would be excellent, but none of us have infinite development time, right ? :D