Documentation Center
AlienVault® USM Anywhere™

Activity on Investigations

  Role Availability   Read-Only   Analyst   Manager

This is an informative section, which allows you to know in a chronological order every modification on the investigation.

Details of a case investigation, activity section

This section displays this information:

  • Email of the person who has made a change.
  • Type of action that has been done. These actions can be:
    Activity: Type of Action
    Type of ActionDescription
    Alarm RemovedAn alarm is removed from the investigation.
    Attachment CreatedA new file is added to the investigation.
    Attachment DeletedA file is removed from the investigation.
    Event RemovedAn event is removed from the investigation.
    Investigation CreatedThe user has created the investigation.
    Investigation DeletedThe user has removed the investigation.
    Investigation UpdatedThe user has updated the investigation.
    New Alarm LinkedA new alarm is linked to the investigation.
    New Event LinkedA new event is added to the investigation.
    Note CreatedA note is created.
    Note DeletedA note is deleted.
    Note UpdatedA note is updated.
  • Date on which the action was made. The displayed date depends on your computer's time zone.