When you analyze an event or threat activity and need to keep track of it, you can add notes to the report or IOC and share them with your team members. You can also tag team members in a report or IOC.
Adding a Note
- Click on the middle bar to expand the report panel and reveal the Notes field:
- Right click on the node and select the Notes option. These annotations will persist on the graph nodes.
Tagging a Person
When creating a note, you can add a team member to the note. The tagged person will be alerted via email.
To tag a team member, type @ and a list of credentialed users to tag will appear and you can select the person from that list. You can also enter a user's email or name to filter on.