Marking an offense for follow-up

In the QRadar Analyst Workflow, you can mark an offense for follow-up when you want to flag it for further investigation.

1. From the Offenses table, do one of the following actions:
   • Select the offenses that you want to flag.
   • Click on a single offense listing to open the offense details.
2. From the Actions list, select Follow up.
   Tip: To remove the flag, select Unfollow from the Actions list.