Updating security cases

Before you begin

Make sure that you have write access to a case to update it.

To update a security case

1. As a security case agent, open a case from the Cases console.

2. On the case details page, use the following options to update the case.

   Option	Action
   	Flag the case and mark it for prioritizing work on it.
   	Request an ad hoc approval.
   	Send an email to communicate with the requester.
   	Add attachments.
   	Add the case to your watchlist.

3. Click Edit, and update the followings details of the case:
   • Summary
   • Priority
   • Contact
   • Assigned Group and Assignee
   • Case template
   • Description
   • Target date
   • Case site
   • Label
   • Categories
4. Click Save.

To change the status of a security case

1. As a security case agent, open a case from the Cases console.
2. Click the status to open the status pane.
3. In the status pane, select the required value in the Status field. 
4. (Optional) Select the reason for changing the case status in the Status Reason field. 
   This field displays a list of reasons for Pending, Resolved, and Canceled statuses.
5. Click Save.

Result

When you change the status of the security case to In Progress, the Runbook is automatically activated, and if the case has any task flow or tasks, they are visible in the Active Tasks and Upcoming Tasks section. 

Where to go from here

Managing-tasks-from-the-runbook