View related details for an IoC artifact

If your case includes indicators of compromise (IoC) artifacts, you can view any related details contained in each IoC referenced by the case.

Before you begin

• The Threat Intelligence plugin must be activated to use Security Case Management.

Role required: sn_ti.case_user_write

Procedure

1. Open a case that contains IoC artifacts.

2. Click the Indicators of Compromise tab.

3. Click Additional Details icon for the IoC artifact you want to view related details for.

1. Click any of the tabs to view specific types of details for the selected artifact.

2. You can also click Security Annotation tab to view annotations for the selected artifact.

Parent Topic:Related details for case artifacts

Related topics

View related details for a security incident artifact

View related details for a configuration item artifact

View related details for an affected user artifact

View related details for an observable artifact