Managing cases

How you manage a case depends on your role, the nature of the case, and the playbook.

Tasks that are involved with managing a case include:

  • Add or update case details.
  • Complete tasks that are assigned to you.
  • Add or remove artifacts.
  • Implement pre-defined actions and check their status.
  • Add information to data tables. If configured, interact with other security tools from data tables.

If you are a case owner or a member, you might be able to add and assign tasks, and create custom tasks.

You can manage cases individually by clicking Menu > My applications > Case Management to display all cases, and then clicking a case to view its details. You can also complete management tasks on multiple cases simultaneously by clicking the check boxes next to those cases and clicking Actions, Export, Assign to, or Manage.