Preview Cases

In this section you can find information about previewing cases and associated details.

To preview the cases details:

On the list of case details page, there is a Preview button corresponding to the specific case name.

1. Click the Preview option.

The case details preview window opens.

You can see details like the id, created by, created at date, updated date, TLP, PAP and severity details, title, status, tags, and description details.

In the right pane of the window, there is an option to Add the following:

1. Add Task.
2. Add Observable.
3. Add TTP.

At the bottom of the window, there is an option to Add the following:

1. Add custom fields.

2. Add business unit, and location details.

3. Click Add to type business unit, detection-source and location details.

   

Actions

You can click the Actions Button to Flag/unflag, close, or to Run Responders.

and to `Run Analyzer.

Case Details

1. Click on the Go to details button.

   You can view more details of the case.

Case details menu

You can view more details of the case by going to the menu.

On the top of the page, there are many case options available such as flag/unflag, merge, export, close delete and run responders.