Managing cybersecurity cases
Security analysts use Case Management to monitor and respond to cases, to assign and resolve tasks, and to analyze data.
Case Management includes cases that are created
automatically based on alert correlation and enrichment. Analysts can also create cases
automatically.
Important: Analysts with User permissions for
Case Management can view only the cases that have been
assigned to them. Users with Admin permissions for Case Management must assign cases to analysts who have
User permissions. Only users with Admin permissions
can see all cases, and automatic case creation does not assign cases to users.