- Case Manager Release Notes
- Get Started with Case Manager
- Configure Case Manager Settings
- Investigate a Security Incident
- Manually Create an Incident
- Edit an Incident
- Delete an Incident
- Manually Add an Entity
- Manually Add an Artifact
- Delete an Entity or Artifact
- Add Advanced Analytics Evidence to a Case Manager Incident
- Manage Tasks During an Investigation
- Send Messages from an Incident
- Filter Incidents
- Search for an Incident
- Sort Incidents
- Export Incidents
PrevNext
Send Messages from an Incident
Send messages, collaborate, and track information right from within an incident.
In an incident, under the Messages tab, send messages and securely distribute information about an incident to your team members or those outside your SOC.
There are two types of messages:
Case notes - Comments added directly to and contained within an incident. Case notes are enabled by default.
Incident emails - Messages to those in your organization who can't access Case Manager or are external to your Security Operations Center (SOC). You send, receive, and track emails directly from an incident. You can add an email attachment to an incident as an artifact.
You can sort, filter, and restrict views to both types of messages.