Investigate an Alert

You can investigate every alert that is triggered on the Alert View. For more detailed investigation on a particular alert, you can view the alert on the Investigation module.

To investigate an alert:

  1. In the Alert section toolbar, click View Alerts to navigate to the View Alerts view.
  2. Do one of the following:
    • Click the netwitness_investigation_icon.png button against the alert you want to investigate.
      The Investigation module displays the details of the first session that registered the match for the given alert for immediate analysis.
    • Click on the alert name of the alert you want to investigate.
      The Investigation module displays all matches for that particular alert for the hour surrounding the registered alert.