LogoLogo
⌘Ctrlk
Go to Workbench
  • Documentation
  • API Reference
  • Support
  • Release Notes
  • Notices
GitBook Assistant
GitBook Assistant
GitBook Assistant

I'm here to help you with the docs.

⌘Ctrli
AI Based on your context
LogoLogo
  • Expel Documentation
    • Get Started
    • Notifications
    • Auto Remediations
    • API Key Self-Service
    • Configure an IP Allow List
    • How to Reach Us
    • About Integrations
    • A-C Integrations
    • D-J Integrations
    • L-P Integrations
    • Q-Z Integrations
    • Expel Assembler
    • Security Devices
    • Expel Terminology
    • Dashboards
    • Activity Pages
    • Tools
    • Organization Settings Pages
    • Event Search
    • Manage Investigations and Incidents
      • Understanding Investigations
      • Understanding Incidents
      • View an Investigation
      • View an Incident
      • View Open Remediation Actions or Investigative Actions
      • Add to an Investigation or Incident
      • Close an Investigation or Incident
      • Reopen an Investigation
      • Create an On-Demand Investigation
    • Alerts
    • Detections
    • Licensing and Usage
    • About Detection Strategy
    • A-C
    • D-M
    • N-Q
    • S-Z
    • Expel Managed Phishing
    • Expel Threat Hunting
    • Expel Vulnerability Prioritization
    • Expel Threat Intelligence
    • Support
    • Release Notes
    • API Documentation
    • Expel Status Page
    • Video Library
Powered by GitBook
For the complete documentation index, see llms.txt. This page is also available as Markdown.
  1. Documentation
  2. Workbench Reference

Manage Investigations and Incidents

Understanding InvestigationsUnderstanding IncidentsView an InvestigationView an IncidentView Open Remediation Actions or Investigative ActionsAdd to an Investigation or IncidentClose an Investigation or IncidentReopen an InvestigationCreate an On-Demand Investigation

Last updated 4 months ago

Was this helpful?

Copyright ©2021-2026. All Rights Reserved.

Was this helpful?