Edit an investigation - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2024-02-26
Last date published
2024-04-21
Category
Administrator Guide
Abstract

Learn how to edit an existing investigation from the Forensic Investigation page.

From the list of ongoing investigations, you can edit the name, description or update the user permissions for the investigation.

  1. From the Forensic Investigations table, right-click one of the investigations and select Edit.

  2. In the Edit Investigation widget, you can update the Investigation Name, Description and Permissions. For information on Permissions, refer to User permissions.