Templates

A template is a blueprint for creating Use Cases with a predefined structure. Templates reduce repetitive work when the same Use Case shape is produced often.

Templates use a rich text Editor with markdown support, slash commands, tables, code blocks, images, and more.

Getting started with templates

A good template defines the structure a Use Case should follow: what sections to fill in, what questions to answer, and what metadata to capture. The goal is consistency across the workspace. Every Use Case looks the same, covers the same ground, and is reviewable by anyone on the team.

Example: Alerting and Detection Strategy (ADS) framework

The Palantir ADS framework is a widely adopted open source structure for documenting detection strategies. It defines sections such as:

• Goal: what the detection is trying to achieve.
• Categorization: MITRE ATT&CK mapping.
• Strategy abstract: a high-level summary of the detection logic.
• Technical context: background needed to understand the detection.
• Blind spots and assumptions: known limitations.
• False positives: expected benign triggers.
• Validation: how to test that the detection works.
• Priority: severity and response expectations.
• Response: what an analyst should do when the detection fires.

Copy the ADS markdown template into the LogCraft editor (markdown paste handles the formatting automatically) and adapt it to your team's needs.

Create a template

1. Open the workspace.
2. Go to Settings > Templates.
3. Click Create template.
4. Enter a title.
5. Write or paste the template content using the rich text editor.
6. Click Save.

Templates are starting points

Once a Use Case is created from a template, the two are independent. Editing a template does not update existing Use Cases, and editing a Use Case does not affect the template. Think of templates as a way to start faster. After creation, the Use Case is free-form content you can reshape however you need.

Edit a template

From Settings > Templates, select the template to update its title or content.

Editing a template does not modify Use Cases that were previously created from it. Existing Use Cases keep the content they were created with.

Delete a template

1. Go to Settings > Templates.
2. Select the template.
3. Click Delete.

Deleting a template does not affect Use Cases that were created from it.

Use a template

Templates are selected when creating a Use Case. See Use Cases.