Managing cybersecurity cases

Security analysts use Case Management to monitor and respond to cases, to assign and resolve tasks, and to analyze data.

Case Management includes cases that are created automatically based on alert correlation and enrichment. Analysts can also create cases automatically.
Important: Analysts with User permissions for Case Management can view only the cases that have been assigned to them. Users with Admin permissions for Case Management must assign cases to analysts who have User permissions. Only users with Admin permissions can see all cases, and automatic case creation does not assign cases to users.