View related details for a security incident artifact

If your case includes security incident artifacts, you can view any related details contained in each security incident referenced by the case.

Before you begin

• The Threat Intelligence plugin must be activated to use Security Case Management.

Role required: sn_ti.case_user_write

Procedure

1. Open a case that contains security incident artifacts.

2. Click the Incidents tab.

3. Click the Additional Details icon for the security incident you want to view related details for.

1. Click any of the tabs to view specific types of details for the selected artifact.

2. You can also click Security Annotation tab to view annotations for the selected artifact.

Parent Topic:Related details for case artifacts

Related topics

View related details for a configuration item artifact

View related details for an IoC artifact

View related details for an affected user artifact

View related details for an observable artifact