Searching Investigations

Role Availability Read-Only Investigator Analyst Manager

USM Anywhere includes the option of searching items of interest on the Investigations page. There are several filters displayed by default. You can either filter your search or enter what you are looking for in the search field.

The following table lists the filters you see on the page.

Filters Displayed on the Investigations Page

Filter Name Meaning
Open/In Review/Closed Filter investigations by status of the investigation. Values are Open, In Review, and Closed. See Editing Investigations for more information.
Severity

Filter investigations by the severity of the investigation. Values are Low, Medium, High, and Critical.

Intent Filter investigations by the intent of the investigation. Options include Delivery & Attack, Environmental Awareness, Exploitation & Installation, Reconnaissance & Probing, or System Compromise. See Intent for more information.
Assignee Filter investigations by the user the investigation is assigned to.