To mark an alert as In Progress, perform the following procedure.

Procedure

  1. On the left navigation pane, click Alerts.
  2. Choose Group by: None.
  3. Select the alert.
  4. In the Actions column, click the dropdown menu.
  5. Click Mark alert in progress.
    The Mark Alert In Progress dialog displays. You can manage related alerts.
  6. Click the + next to Manage Related Alerts.
    Mark in Progress dialog
  7. Choose whether to mark all alerts that have the same threat ID as In Progress.
  8. Click OK.

Results

The workflow status of the alert changes to In Progress. The change is recorded in the Alert ID History section of the Alert Details pane.