Edit an investigation - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-05-15
Category
Administrator Guide
Abstract

Learn how to edit an existing investigation from the Forensic Investigation page.

From the list of ongoing investigations, you can edit the name, description or update the user permissions for the investigation.

  1. From the Forensic Investigations table, right-click one of the investigations and select Edit.

  2. In the Edit Investigation widget, you can update the Investigation Name, Description and Permissions. For information on Permissions, refer to User permissions.