Creating and Managing Manual Cases from Users
This article explains how to create a manual case from one or more users, add more users to an existing manual case, and where to find these actions in the console.
Overview
Manual case creation lets you open an investigation case directly from one or more users, without needing a related transaction or alert first. You can start this from the Users list (for one or more users at once) or from a single user's profile page.
A manual case can also be grown over time: you can add more users to an existing manual case later, whether or not they were part of the original case.
Feature 1. Create a manual case from the Users list
1. Go to the Users list page.
Figure 1 - The Users list page.
2. Select two or more users using the checkboxes on the left of each row. Click the Manual case button in the bottom-right corner, then choose Create a manual case.
Figure 2 - With users selected, the Manual case menu shows Add to manual case and Create a manual case.
3. Fill in the Reason and Priority fields, and optionally add a Comment. Reason options come from your organization's configured reason list. Then click Create.
Figure 3 - The Create manual case dialog, with Reason, Priority, and Comment fields.
4. A confirmation modal appears with the new case ID. Click the View case link in the modal. to open the case.
Figure 4 - Confirmation pop up shown after a manual case is created.
5. On the case page, open the User details tab. All users you selected when creating the case appear as separate tabs at the top of this section, so you can confirm everyone was added and switch between their individual profiles.
Figure 5 - User details tab, showing the first of two users on the case.
Figure 6 - Clicking the second tab switches the panel below to that user's details.
Feature 2. Add more users to an existing manual case
6. Go back to the Users list, select one or two different users, click Manual case, then choose Add to manual case.
In the dialog, search for the case you created earlier by its case ID (for example, C-3464), select it, fill in Reason and an optional Comment, then click Add.
Figure 7 - Add to manual case dialog, with an existing case selected by its case ID.
7. After submitting, open the case again. It now shows both the original users and the newly added users under User details.
Figure 8 - Case details table now listing all three users: the original two plus the newly added one.
Feature 3. Create or add to a case from a single user's page
8. Open a single user's profile page. Both Create a manual case and Add to manual case are also available from the header menu (the ⋮ icon next to Comment, top right of the page), so you don't need to go back to the Users list to do this for one user at a time.
Figure 10 - The header menu on a single user's page, with Add to manual case and Create a manual case.