- Case Manager Release Notes
- Get Started with Case Manager
- Configure Case Manager Settings
- Investigate a Security Incident
- Manually Create an Incident
- Edit an Incident
- Delete an Incident
- Manually Add an Entity
- Manually Add an Artifact
- Delete an Entity or Artifact
- Add Advanced Analytics Evidence to a Case Manager Incident
- Manage Tasks During an Investigation
- Send Messages from an Incident
- Filter Incidents
- Search for an Incident
- Sort Incidents
- Export Incidents
Out-of-the-Box Incident Filters
There are four out-of-the-box incident filters. You can't delete them. If you don't want to use them, build off of them by duplicating them and making changes, or create your own filter from scratch.
Out-of-the-box filter | Use this filter to view... | Filter inputs |
|---|---|---|
All Incidents | All open incidents that have been created, no matter who it's assigned to; when it started, ended or was created; or its priority. | Status: New, in progress, resolved, pending |
My Incidents | All open incidents you've been assigned to. | Owner: Current user Status: New, in progress, resolved, pending |
Unassigned Incidents | Incidents that are recently created and not assigned to a queue. | Owner: Default queue Status: New |
Critical incidents | All open incidents that are a critical priority, no matter who it's assigned to or when it started, ended, or was created. | Priority: Critical Status: New, in progress, resolved, pending |