ThreatEye How-To Guide: Create a Casebook
How do you Create a Casebook or Add a finding to an existing Casebook?
You can accomplish this through the findings area
OR you can also go into the analyst dashboard then click into a message of interest. This will take you to findings
Select a finding that you want to add to a casebook or create a new case book by clicking “Add to existing” OR “Add to new.”
If you select “Add to existing” select the casebook you want to add the finding to. A green confirmation box will let you know the finding has been added.
If you select “Add to new case book,” you are prompted to create a name, assign a security analyst, a priority level, and a status.
In this example, we are using “Testing_EDG” as the name and giving it the status of “Assigned.” This is typically the first status given in a workflow.
Now, in the casebook section my casebook example, “Testing_EDG” is here with the alert.
Want to step through this or any part of the UI together? Schedule a quick demo and we’ll walk through your use case.