Exclude security artifacts from a case

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：1分

    • You can remove artifacts from the lists of supporting artifacts. They are not permanently removed and can be returned to the case as needed.

    始める前に

    • The Threat Intelligence plugin must be activated to use Security Case Management.
    Role required: sn_ti.case_user_write

    手順

    1. Open a case that contains artifacts that you want to exclude from a list.
    2. Click the Case Artifacts related list.
    3. Click the tab associated with the artifacts you want to exclude.
      For example, click Incidents to exclude security incidents from the list.
    4. Select one or more artifact records that you want to exclude.
      Exclude security incidents from the list
    5. From the Actions on selected items drop-down list, select Exclude.
    6. Click Exclude in the confirmation box.
      The selected artifacts are removed from the list.