When you analyze an event or threat activity and need to keep track of it, you can add notes to the Intel Report or Indicator and share that information with your team members. You can also tag team members in a note to ensure they are notified of the information you have added.
Adding a Note
- Click on the middle bar to expand the report panel and reveal the Notes field:
- Right click on the node and select the Notes option. These annotations will persist on the graph nodes.
Tagging a Person
When creating a note, you can add a team member to the note. The tagged person will be alerted via email.
To tag a team member, type @ and a list of credentialed users to tag will appear and you can select the person from that list. You can also enter a user's email or name to filter on.