USM Anywhere enables you to associate
Important: You can link up to 100
To add an
- Go to Activity > Event.
- Locate the
eventyou want to add to the investigation and click it. See Searching Events for assistance.
- Click Add to Investigation.
- Search the investigation. You can enter the title or the number that identifies each investigation.
- Click Save.
Note: Click Create New Investigation if you want to start a new investigation. See Creating New Investigation for more information.
The connection has been done and you can see it from Investigations. See Evidence on Investigations for more information.