Working with Investigation Canvas › Threat Analyst Workbench › Use › Threat Intelligence Security Center › Security Operations

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Linking Canvas from a Case

Use this section to link a canvas from a case.

Before you begin

Role required: sn_sec_tisc.analyst

Navigate to Workspaces > Threat Intelligence Security Center.
Click the Threat Analyst Workbench icon.
Go to Investigation Canvases > All Canvases.
From the All Cases list view, select a case which is not linked to the canvas.
Go to Investigation Canvas section.
Select Link Case from the drop down list on the empty canvas page (the option is shown in the following screenshot).

Image omitted: tisc-link-canvas-from-case.png
Link Canvas from a Case

Select the canvas.
Select the Link button to link the canvas to a case.

An information message is displayed indicating that the canvas data is refreshed successfully.