Manage saved discoveries
Attack Discovery saves findings automatically after each run. From there you can update status, filter and search discoveries, take triage actions such as assign or open a case, and review linked alerts. Where you do that work depends on your version.
| Best for | Available in | Go to |
|---|---|---|
| Day-to-day triage of attack findings together with their related alerts, including assign, tag, filter, and case actions. |
|
Manage from the Attacks view |
| Update status, share findings, run bulk actions, and search discoveries on the Attack Discovery page (primary before Attacks in Elastic Stack 9.5). |
|
Manage from the Attack Discovery page |
Note
On the Elastic AI SOC Engine (EASE) tier, the Attacks view is unavailable. Use the Attack Discovery page instead.