Viewing Investigations Details

Role Availability	Read-Only	Investigator	Analyst	Manager

The investigations details view provides in-depth information on an investigation and provides easy access to the investigation. When you use this feature to access the investigation at the deployment level, you can modify some of the fields related to the investigation, as well as create associated alarms, files and events and add notes.

To view the details of an investigation

1. Go to Investigations.

2. Click the title of an investigation to display its details.

   

   On the upper left side of the page is the name of the investigation. Click the icon next to the name if you want to make changes to the item. See Investigations List View for more information about the fields.

   Below the investigation name displays the ID of the investigation. To the right is information regarding the created and the last modified dates.

   You can change the values displayed in the Assignee, Severity, Intent, and Status drop-down lists. The modification is automatic, so once you change a value, it is updated.

This topic discusses these subtopics:

• Activity on Investigations

• Notes on Investigations

• Evidence on Investigations