After a case has been created, it may be necessary for a SOC analyst or SOC leader to modify a case. This could include changing the severity of a case, reassigning the case, adding new events to the case, and so on. The ability to modify a case depends on your role and permissions.
Modifying a case
- Published on Sep 12, 2026
- 1 minute(s) read
Was this article helpful?