View related details for an observable artifact

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • If your case includes observable artifacts, you can view any related details contained in each observable referenced by the case.

    Before you begin

    The Threat Intelligence plugin must be activated to use Security Case Management.

    Role required: sn_ti.case_user_write

    Procedure

    1. Open a case that contains observable artifacts.
    2. Click the Observables tab.
    3. Click Additional Details icon for the observable artifact you want to view related details for.
      View related details for an observable
    4. Click any of the tabs to view specific types of details for the selected artifact.
    5. You can also click Security Annotation tab to view annotations for the selected artifact.