Status tracks your progress on an investigation. Wise Verdict represents the Investigation Agent's assessment of the alert. The Investigation Agent does not change the investigation status based on its verdict. For example, an investigation can have Status: New and Wise Verdict: True Positive if you have not started reviewing it.
From an investigation row, select the three-dot menu and select Change Status. Alternatively, select the Status field on the investigation details page.
To update multiple investigations, select the investigations from the list and select Actions > Change Status.
Set New Status to New, In Progress, or Closed. Add an optional note to explain the change.
When setting the status to Closed, provide User Assessment and User Feedback. Both fields are required.
To assign an investigation to an analyst, select Assign from the investigation row or use the bulk action. Add an optional note with the assignment.