Linking an existing case from Investigation Canvas

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 1 Minute Lesedauer

    • Use this section to link an existing case from the investigation canvas.

    Vorbereitungen

    Role required: sn_sec_tisc.analyst

    Prozedur

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Select Threat Analyst Workbench icon.
    3. Go to Case Management > All Cases.
      This displays all the cases.
    4. Select Case Management > All Cases
    5. Open any case record from the list view.
    6. Select Link Case from the Details section.
      The Link a Case dialogue box appears.
    7. Select a case ID from the list to associate the case to an investigation canvas.
      Link an existing case from investigation canvas.

      A confirmation message is displayed confirming that the case is linked successfully.

      Hinweis:
      In case if no case is available for linking to the Investigation Canvas, you can create a new case to initiate and organize your investigation context. For more information on how to create a new case, see Creating a Case and Linking from Investigation Canvas
      .
    8. To remove a linked case, select the Unlink button.