| Table of Contents | ||||
|---|---|---|---|---|
|
...
In the Investigations area, click the yellow + icon. In this case, you can only create investigations from scratch.
In the Triage area, after filtering alerts, you can click the Add to investigation button next to each group of alerts to create an investigation related to those alerts. All the elements you add to an investigation in this way will be added to the Investigation list, which you can access by clicking the paper clip icon at the top right corner of the application. Learn more about the Investigation list.
...
...
In the Hunting area, click the Add to investigation button after performing a search. In this case, elements will be also added to the Investigation list. Learn more about this in the Threat Hunting article.
...
If you start defining a new filter or start defining a new filter, you can click Reset filters to ❤ to set your favorite filter.
...