You can view additional context about incident tickets to help you investigate and remediate security issues.

1. Connectez-vous à Arctic Wolf Unified Portal.
2. Dans le menu de navigation, cliquez sur Ticket et alertes > Tous les tickets.
3. Find an incident ticket that you want to view.
4. Click the Subject or Ticket # of the ticket.
5. Click Investigation Context to view additional information about the ticket.
   Note: This tab is not available for all tickets.

   This may include:

   • Additional log data about the ticket.

     We manually provide this data based on what we determine is valuable. This information is also available to download from the Attachments tab.

   • A tree diagram of command line processes that ran.
   • Contextual information about public IP addresses mentioned in the ticket.
   • Data Explorer results from queries that Arctic Wolf ran while investigating the ticket. The amount of data available in the results depends on your Data Explorer license. For more information, see Data Explorer license options.
6. Optional: Click Attachments to download files that are related to your ticket, if available.
   Note: Attachments are only available for alert tickets if Arctic Wolf attached them to your ticket.