Exclude security artifacts from a case

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture

    • You can remove artifacts from the lists of supporting artifacts. They are not permanently removed and can be returned to the case as needed.

    Avant de commencer

    • The Threat Intelligence plugin must be activated to use Security Case Management.
    Role required: sn_ti.case_user_write

    Procédure

    1. Open a case that contains artifacts that you want to exclude from a list.
    2. Click the Case Artifacts related list.
    3. Click the tab associated with the artifacts you want to exclude.
      For example, click Incidents to exclude security incidents from the list.
    4. Select one or more artifact records that you want to exclude.
      Exclude security incidents from the list
    5. From the Actions on selected items drop-down list, select Exclude.
    6. Click Exclude in the confirmation box.
      The selected artifacts are removed from the list.