Create a Case
Creating a new case involves adding one or more signals into a case folder. Each case is focused on investigating a particular type of incident. By organizing cases in this manner, the security team can prioritize high-risk incidents, streamline investigations, and accelerate response times.
How to create a new case?
-
New cases can be created from the signals listing page by selecting one or more signals.
-
Click the Signals icon on the left navigation bar of the Home screen, the following screen will be displayed.
Creating a case with one signal
-
Click the icon next to the Signal for which a new case needs to be created.
-
On the side panel that appears, Click the plus icon shown below to create a new Case.
-
The following screen will be displayed.
-
Enter the following details:
| Fields | Description |
|---|---|
| Name | Enter a case name |
| Severity | Enter a severity level for the signal |
Handler  | Click and select the handler/user who will investigate the case from the drop-down (optional). |
Save  | Click to save the case |
- Enter the above details and click Save. The new case will be saved and listed.
Creating a case with multiple signals
-
Users can select the checkboxes next to the desired Signals, then click Add to Case to create a new Case or add them to an existing Case.
-
On the side panel that appears, click the plus icon to create a new Case.
-
The following screen will be displayed
| Fields | Description |
|---|---|
| Name | Enter a case name |
| Severity | Enter a severity level for the signalHandler |
| Click and select the handler/user who will investigate the case from the drop-down (optional) |
| Save | Click to save the case |
- Enter the above details and click Save. The new case will be saved and listed.