Investigate: Downloading and Acting Upon Results

When working in Investigate, you may want to extract and shared data with other analysts, incident responders, SOC managers, and others. The topics in this section provide instructions for downloading results and creating incidents that appear in the Respond view:

• Download Data in the Events View
• Export or Print a Drill Point in the Navigate View
• Export Events in the Legacy Events View
• Add Events to an Incident in the Events View
• Add Events to an Incident in the Legacy Events View