Creating cases

When you create a case in FortiDLP, you can provide:

• a title and summary to identify the focus of the case
• a severity to indicate the level of risk posed by the events and detections you will add to the case, and
• tags to classify the case.

By default, a new case displays with a "New" badge for 24 hours and appears at the top of the Open cases panel for increased visibility.

There are several ways to create a case. The following instructions describe how to create a case from the Cases module.

How to create a case from the Cases module

1. In the FortiDLP Console, on the left-hand sidebar, click .
2. On the top-right corner of the page, click Open new case.
3. Optionally, to provide a case title:
   1. In the Unnamed case widget, click .
   2. Type a case title.
      
   3. Click Save.
      If you do not add a title, the case will be given the title "Unnamed case".
4. Optionally, to provide a severity, click the Severity widget and then select the severity level for the case.
   
5. Optionally, to provide one or more case tags:
   1. In the Add tags to the case widget, click .
   2. Type one or more tags to classify the case, separated by a space.
      
      
   3. Click Save.
      
6. Optionally, to provide a case summary:
   1. In the Case summary widget, click .
   2. Type a case description, in either plain text or Markdown, if you want to format the summary.
      
      
   3. Click Save.

To add events and detections to the case, see Adding events and detections to cases.