Quick Overview
Detailed Overview
As long as a case is open, you can update, edit, or delete any of its resources. This makes a case very powerful when compared to an alert.
- From Cases click on the case you want to edit.
- To add a resource, click the dropdown icon and select the resource you want to add to the case:
- Tags- unique identifiers and added metadata
- Watchers- other agents that should get updates/alerts on the case
- Alerts- associated alerts
- Entities- associated entities
- Events- associated events
- To remove a resource, click the
xby their name.