Edit an investigation - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2024-07-16
Last date published
2024-12-12
Category
Administrator Guide
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XDR/Cortex-XDR-Documentation
Abstract

Edit an existing investigation from the Forensic Investigations page.

From the list of active investigations, you can edit the name, description or update the user permissions for the investigation.

  1. From the Forensic Investigations table, right-click one of the investigations and select Edit.

  2. In the Edit Investigation widget, you can update the Investigation Name, Description, and Permissions. For more information, refer to User permissions.