USM Anywhere allows you to associate an
To add an
- Navigate to ACTIVITY > EVENT.
- Search for the
eventyou want to add to the investigation and click on it. For assistance, see Searching Events.
- Click Add to Investigation.
- Search the investigation. You can enter the title or the number that identifies each investigation.
- Click Save.
Note: Click Create New Investigation if you want to start a new investigation. See Creating New Investigation for further information.
The connection has been done and you can see it from INVESTIGATIONS, see Evidence on Investigations for more information.