Working with Collections

This section covers core workflows for finding, viewing, and working with collections in Workstation, which analysts use to investigate activity and build collaborative case files.

1. Creating Collections: Create collections from different areas of Workstation, either empty or pre-populated with events.
2. Finding Collections: Search for, filter, and open collections.
3. Managing Collections: Update collection properties, collaborate with others, and organize related data such as events, custom fields, files, and linked collections.
4. Sharing Collections: Share collections with internal or external users for collaboration and review.