- Get Started with Threat Center
- Threat Center
- Threat Center Permissions
- Threat Center Alerts: Read
- Threat Center Alerts: Read, Write, and Delete
- Threat Center Cases: Read
- Threat Center Cases: Read, Write, and Delete
- Threat Center Detection Grouping Rules: Read
- Threat Center Detection Grouping Rules: Read, Write, and Delete
- Threat Center Watchlist: Read
- Threat Center Watchlist: Read, Write, and Delete
- Threat Center Cases
- Threat Center Alerts
- Threat Center Detections
- Threat Center Risk Score
- Configure Threat Center
- Monitor Entities of Interest in Threat Center
- Work on Cases
- Work on Alerts
- Edit and Collaborate in Threat Center
- Use Automation Tools in Threat Center
- Find Cases and Alerts
- View Case and Alert Metrics
- Get Notified About Threat Center
- Threat Center APIs
To organize cases or alerts, sort them. You can sort cases and alerts by risk score, when they were created, and the attribute by which detections are grouped. For cases, you can also sort by stage, queue, and assignee.
By default, cases and alerts are sorted by risk score, from highest to lowest.
Use sorting with search and filters to find the cases or alerts you need.
Sort Cases or Alerts by Risk Score
In the Cases or Alerts tab, click the RISK SCORE column header.
If cases or alerts have the same risk score, they are then sorted by when it was created, from newest to oldest.
To toggle between ascending and descending order, click the column header again.
Sort Cases or Alerts by When They Were Created
In the Cases or Alerts tab, click the CREATED column header.
To toggle between ascending and descending order, click the column header again.
Sort Cases or Alerts by Detection Grouping Attribute
In the Cases or Alerts tab, click the GROUPED BY column header.
Cases or alerts are sorted by attribute in alphabetical order. If cases or alerts have the same detection grouping attribute, they are then sorted by attribute value in alphabetical order.
To toggle between ascending and descending order, click the column header again.
Sort Cases by Stage
In the Cases tab, click the STAGE column header. Cases are sorted by stage in alphabetical order.
To toggle between ascending and descending order, click the column header again.
Sort Cases by Queue
In the Cases tab, click the QUEUE column header. Cases are sorted by queue in alphabetical order.
To toggle between ascending and descending order, click the column header again.
Sort Cases by Assignee
In the Cases tab, click the ASSIGNEE column header. Cases are sorted by assignee in alphabetical order.
To toggle between ascending and descending order, click the column header again.