Understand the investigations queue

Use the investigations list to filter alerts, review Wise verdicts, prioritize investigations, and select investigations for analysis.

1. In the Trellix Wise™ for Private Cloud UI, select Investigations from the navigation panel.

2. Filter the investigations list using:

   1. Time Range — Select a predefined or custom date and time range.

   2. Severity — Select Critical, High, Medium, or Low.

   3. Wise Verdict — Select True Positive, False Positive, Inconclusive, Pending, or Analyzing.

3. Sort and customize the table columns as needed.

4. Review the Wise Verdict and Severity to identify investigations that need attention.

5. Select an investigation to review its details.

6. Select Refresh to retrieve the latest investigations.

7. To export investigation data:

   1. Select the three-dot menu at the end of a row and select Export to export the investigation metadata in JSON or CSV format.

   2. Select the table Settings icon and select Export Table to export the current filtered list.

8. To act on multiple investigations:

   1. Select the target investigations.

   2. Select Actions drop-down menu.

   3. Select Change Status, Assign, or Export.