Skip to main content
Version: Next

Working with Events

This section covers common workflows for finding, viewing, and working with events in Workstation. These tasks help analysts investigate activity, take action on events, and collaborate with others.

  1. Finding Events: Learn how to search, filter, and locate events for investigation.
  2. Viewing Events: Inspect event details, metadata, and related information once an event is opened.
  3. Adding to Collections: Add events to collections to build and manage case files.
  4. Using the Chatbot with Events: Use the AI Chatbot to analyze individual events, including summarization, entity extraction, and suggested lines of inquiry.
  5. Manual Actions: Apply predefined manual actions to events to provide feedback or trigger downstream processing.
  6. Sharing Events: Share events with other users inside or outside the system for collaboration and review.