Select Page

How Do I Close Incidents in WitFoo Precinct?

Welcome Forums Investigate Workflows How Do I Close Incidents in WitFoo Precinct?

This topic contains 0 replies, has 1 voice, and was last updated by Mike Riforgiate Mike Riforgiate 6 months, 2 weeks ago.

Viewing 1 post (of 1 total)
  • Author
    Posts
  • #1681
    Mike Riforgiate
    Mike Riforgiate
    Keymaster

    https://vimeo.com/218022743/4ed3dc6d49

    Closing out incidents in Detective (a component of WitFoo Precinct) can be accomplished through clicking next to Status in the top bar above the link board.  The default status is set to open.

    Once you click on Open next to Status, you will be presented with a pop-up to choose the disposition of the incident, annotate the incident, and give assignment of the incident (if needed).

    The disposition statuses currently available are:

    Convicted – This was an actual security incident.
    Acquitted – This was a false positive.
    Cold Case – The analyst did not have enough information to determine the correct disposition of the incident.

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.