Offense actions

IBM® QRadar® provides the capability to act on the offenses as you investigate them. To help you track offenses that were acted upon, QRadar adds an icon to the Flag column when you assign an offense to a user, protect or hide an offense, add notes, or mark the offense for follow-up.

To perform the same action on multiple offenses, hold the Control key while you select each offense you want to act on. To view offense details on a new page, press the Ctrl key while you double-click an offense.