Current ThreatQ Version Filter
 

About the Investigations Page

THREATQ REQUIRED PERMISSIONS

Default ThreatQ Role: Administrative, Maintenance, or Primary Contributor
Custom Role - Action Permissions: Artifact Management - Investigations

Investigations begins with the Investigations page.  You can access the Investigations page by clicking on the Investigations Icon link located in the top menu of the ThreatQ platform.

The Investigations overview page displays the 100 most recently updated investigation cards in descending order by the date of their last update. As such, the most recently updated investigation is listed first.

Investigations Page

 

Visibility Filter

The Visibility filter allows you to filter your investigations by the sharing status of each investigation.

Visibility option Description
All (default) This option displays all investigations, private and shared.  
Private This option displays investigations you have created and that have not been shared with other users.

These investigations will also have a Private tag located to the bottom-right of the investigation card.

Shared This option displays investigations that you have shared with others or have been shared with you.  

Status Filter

The Status filter allows you to filter your view by Open and Closed investigations.  

Priority Filter

The Priority filter allows you to filter your investigations by the set priority.  Options include: 

  • All (default)
  • Normal 
  • Escalated

Priority designations should respect your organization's SOP. 

Pinning an Investigation

You can create a Favorites list of frequently accessed investigations by pinning them to the Investigations menu.  These shortcuts allow you to bypass the Investigations page and go directly to the investigation's evidence board.   You can repeat the same steps to unpin an investigation.  

  1. Locate the investigation you want to pin to the Investigations menu.
  2. Click the vertical ellipsis menu and select the Pin to Top Menu option.

    Investigations Menu

    The pinned Investigation will now appear under the Investigations menu.

    Pinned Investigation

    Investigation names on the Investigations menu are truncated at thirty characters. In addition, if you add more than ten investigations to the menu, a scroll bar allows you to browse the list.

    You can also pin an investigation from the Evidence Board.