Analysts can configure some aspects of NetWitness Suite Investigation views and behavior. You can customize the way that Investigation views appear, the types of information displayed, and factors that affect performance in returning results and reconstructing events. All configurable settings have default values that are effective in most deployments; however, analysts have the option to adjust these if necessary.
Analysts who conduct analysis using Investigation need to have the appropriate system roles and permissions set up for their user accounts. An administrator must configure roles and permissions as described in Roles and Permissions for Malware Analysts.
These topics provide details: