Investigations List View

Role Availability	Read-Only	Investigator	Analyst	Manager

The Investigations page provides a list of all of the investigations created in your environment. Go to Investigations to open a centralized view of your investigations. Each row details an investigation.

The Investigations page includes navigation and filtering elements to help you locate the investigations you want to review. When you go to Investigations, the page displays all of the open and in-review items by default.

The following table lists the default columns on the Investigations page.

Default Columns on the Investigations Page

Column / Field Name	Description
Title	Name identifying the investigation.
ID	Sequential and automatic number assigned by the system that identifies the investigation.
Created	Date and time the investigation was created. The date displayed depends on your computer’s time zone.
Severity	Severity of the investigation. Values are Low, Medium, High, and Critical.
Status	Status applied to the investigation. It can be Open, In Review, and Closed. See Viewing Investigations Details for more information.
Intent	Classify your investigation as Delivery & Attack, Environmental Awareness, Exploitation & Installation, Reconnaissance & Probing, or System Compromise. See Intent for more information.
Assignee	Email of the person to whom the investigation has been assigned.
Last Modified	Date and time that the Investigations page was last modified. The date displayed depends on your computer’s time zone.
Last Modified by	Email of the last person who has modified the investigation.

Click the icon to modify some information. See Editing Investigations for more information.

Click the icon to delete an investigation. See Deleting Investigations for more information.