View related details for an IoC artifact

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • If your case includes indicators of compromise (IoC) artifacts, you can view any related details contained in each IoC referenced by the case.

    Before you begin

    • The Threat Intelligence plugin must be activated to use Security Case Management.
    Role required: sn_ti.case_user_write

    Procedure

    1. Open a case that contains IoC artifacts.
    2. Click the Indicators of Compromise tab.
    3. Click Additional Details icon for the IoC artifact you want to view related details for.
      View related details for an IoC
    4. Click any of the tabs to view specific types of details for the selected artifact.
    5. You can also click Security Annotation tab to view annotations for the selected artifact.