Update auto-investigation-action-center.md

This commit is contained in:
Denise Vangel-MSFT
2020-04-17 12:02:01 -07:00
parent 746f5c00d1
commit 804093eeca

View File

@ -61,11 +61,11 @@ On the **Investigations** page, you can view details and use filters to focus on
|---------|---------| |---------|---------|
|**Status** |(See [Automated investigation status](#automated-investigation-status)) | |**Status** |(See [Automated investigation status](#automated-investigation-status)) |
|**Triggering alert** | The alert that initiated the automated investigation | |**Triggering alert** | The alert that initiated the automated investigation |
|**Detection source** |The source of the alert that initiated the automated investigation. | |**Detection source** |The source of the alert that initiated the automated investigation |
|**Entities** | Entities can include device or machines, and machine groups. You can filter the automated investigations list to zone in a specific machine to see other investigations related to the machine, or to see specific machine groups that you might have created. | |**Entities** | Entities can include device or machines, and machine groups. You can filter the automated investigations list to zone in a specific machine to see other investigations related to the machine, or to see specific machine groups that were created. |
|**Threat** |The category of threat detected during the automated investigation. | |**Threat** |The category of threat detected during the automated investigation |
|**Tags** |Filter using manually added tags that capture the context of an automated investigation.| |**Tags** |Filter using manually added tags that capture the context of an automated investigation|
|**Comments** |Select between filtering the list between automated investigations that have comments and those that don't.| |**Comments** |Select between filtering the list between automated investigations that have comments and those that don't|
## Automated investigation status ## Automated investigation status