Skip to main content
Role AvailabilityRead-OnlyInvestigatorAnalystManager
The Investigations page provides a list of all of the investigations created in your environment. Go to Investigations to open a centralized view of your investigations. Each row details an investigation.
The Investigations page includes navigation and filtering elements to help you locate the investigations you want to review. When you go to Investigations, the page displays all of the open and in-review items by default. The following table lists the default columns on the Investigations page. Default Columns on the Investigations Page
Column / Field NameDescription
TitleName identifying the investigation.
IDSequential and automatic number assigned by the system that identifies the investigation.
CreatedDate and time the investigation was created. The date displayed depends on your computer’s time zone.
SeveritySeverity of the investigation. Values are Low, Medium, High, and Critical.
StatusStatus applied to the investigation. It can be Open, In Review, and Closed. See Viewing Investigations Details for more information.
IntentClassify your investigation as Delivery & Attack, Environmental Awareness, Exploitation & Installation, Reconnaissance & Probing, or System Compromise. See Intent for more information.
AssigneeEmail address of the person assigned to the investigation.
Last ModifiedDate and time that the investigation was last modified. The time and date displayed depends on your computer’s time zone.
Last Modified byEmail of the last person who modified the investigation.
RatingThreat rating of the investigation. It can be Credible, Not Credible, or Undetermined. See Viewing Investigations Details if you want to change the status.
Click the icon to modify an investigation. See Editing Investigations for more information. Click the icon to delete an investigation. See Deleting Investigations for more information.