USM Anywhere enables you to associate
Important: You can link up to 100
To add an
- Go to Activity > Event.
- Locate the
eventyou want to add to the investigation. See Searching Events for more information.
- In the Investigation field, click the icon to edit it and enter the title or the number that identifies the investigation.
- Click Apply.
Note: Click Create New Investigation if you want to start a new investigation. See Creating a New Investigation for more information.
The connection has been done and you can see it from Investigations. See Evidence on Investigations for more information.