Views:
On the Noteworthy Events screen, you can view the infection chains of known malware detections and alerts triggered by detection models, and perform further investigation on noteworthy objects.
The following table outlines the tasks available for Noteworthy Events.
Task
Description
Filter the list
Use the time period drop-down list to filter the list.
Change the event status
Select events from the list, click Mark As, and select one of the following statuses:
  • New
  • Under investigation
  • Closed
Tip
Tip
Closed investigations are hidden by default. To show hidden investigations, disable Hide closed investigations.
Export events
Click Export All to save all events in a CSV file.
View the Analysis Chain
Click the link in the Analysis Chain column to view more details about the event and perform further investigation on noteworthy objects.
For more information, see Analysis Chains.