...
We want to add these alerts to an investigation, so click the +Add (N Alerts and N Entities) to Investigation button at the top of the window. Then, click the Investigation list button at the top right, which is now enabled and displaying displays the number of objects added to the bucket and waiting to be included in an investigation. In the window that appears, keep the default option New investigation and click Create investigation.
...