In addition to the standard options, the Manual Action,
Case Task, and Alert Options menus are available under the
case header. These menus provide quick access to these commonly used actions.
Alerts List: The Alerts List icon appears only
when a case contains more than two alerts. You can use the menu to select a specific alert
and go directly to it.
Manual Action: While reviewing case information, you can
initiate a manual action without leaving the Cases page.
For more information, see Perform a manual action.
Case Task: You can add a case-specific task and assign it
to a user or role, including yourself. For more information, see Manage tasks from the Cases page.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eThe \u003cstrong\u003eCases\u003c/strong\u003e page in Google SecOps SOAR provides a centralized location for managing and investigating security cases, including the Case Queue Header, Case Top Bar (left and right), and Case/Alert Information sections.\u003c/p\u003e\n"],["\u003cp\u003eThe Case Top Bar, located at the top of the case interface, displays critical information such as Case Priority, Case Title, Case ID, Case Stage, Timestamp, Change Environment, and Manage Tags on the left, while also showcasing the Analyst Name/Role, Chat, Close Case, Refresh, Explore, and Actions Menu on the right.\u003c/p\u003e\n"],["\u003cp\u003eWithin a case, users can access various tabs, including the Case Overview, Case Wall, Alert Overview, Alert Events, and Alert Playbooks, which offer different perspectives and detailed information about the case and associated alerts.\u003c/p\u003e\n"],["\u003cp\u003eAdditional actions available on the \u003cstrong\u003eCases\u003c/strong\u003e page include the ability to view an Alerts List, create Manual Actions, manage Case Tasks, and utilize an Alert Options Menu, all accessible from the right side under the Case Top Bar.\u003c/p\u003e\n"],["\u003cp\u003eUsers can find comprehensive guidance and support from community members and Google SecOps professionals through a dedicated community forum link provided on the \u003cstrong\u003eCases\u003c/strong\u003e page.\u003c/p\u003e\n"]]],[],null,["# Explore the Cases page layout and options\n=========================================\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \nThis document describes the layout and interactive elements available on the **Cases** page in Google Security Operations.\n\nCase queue header\n-----------------\n\n[](/static/chronicle/images/soar/workingwithcases1.png)\n\nFor details on the case queue header, see [What's on the Case queue header?](/chronicle/docs/soar/investigate/working-with-cases/whats-on-the-case-queue-header)\n\nCase top bar - left side\n------------------------\n\n[](/static/chronicle/images/soar/workingwithcases2.png)\n\nThe left side of the case top bar displays the following details:\n\n- [Case Priority](/chronicle/docs/soar/investigate/working-with-cases/what-actions-can-you-take-on-a-case)\n- Case Title\n- Case ID\n- [Case Stage](/chronicle/docs/soar/investigate/working-with-cases/what-actions-can-you-take-on-a-case)\n- Timestamp: The last modified time of the case.\n- Change Environment\n- [Manage Tags](/chronicle/docs/soar/investigate/working-with-cases/manage-tags-from-the-cases-screen)\n\nCase top bar - right side\n-------------------------\n\n[](/static/chronicle/images/soar/workingwithcases3.png)\n\nThe right side of the case top bar displays the following details:\n\n- Analyst Name or Role\n- [Chat](/chronicle/docs/soar/investigate/working-with-cases/instant-messaging-on-a-case)\n- [Close Case](/chronicle/docs/soar/investigate/working-with-cases/how-to-close-cases)\n- Refresh\n- [Explore](/chronicle/docs/soar/investigate/working-with-cases/explore-entities-and-alerts-investigation)\n- [Actions Menu](/chronicle/docs/soar/investigate/working-with-cases/what-actions-can-you-take-on-a-case)\n\nCase or alert information\n-------------------------\n\n[](/static/chronicle/images/soar/workingwithcases4.png) [](/static/chronicle/images/soar/workingwithcases5.png)\n\nThe following tabs are available to view case and alert details:\n\n- [Case Overview tab](/chronicle/docs/soar/investigate/working-with-cases/whats-on-the-case-overview-tab)\n- [Case Wall tab](/chronicle/docs/soar/investigate/working-with-cases/whats-on-the-case-wall-tab)\n- [Alert Overview tab](/chronicle/docs/soar/investigate/working-with-alerts/whats-on-the-alert-overview-tab)\n- [Alert Events tab](/chronicle/docs/soar/investigate/working-with-alerts/alert-events-tab)\n- [Alert Playbooks tab](/chronicle/docs/soar/investigate/working-with-alerts/whats-on-the-alert-playbook-tab)\n\nAdditional actions on the cases page\n------------------------------------\n\nIn addition to the standard options, the **Manual Action** ,\n**Case Task** , and **Alert Options** menus are available under the\ncase header. These menus provide quick access to these commonly used actions.\n[](/static/chronicle/images/soar/workingwithcases7.png)\n\n- **Alerts List** : The **Alerts List** icon appears only when a case contains more than two alerts. You can use the menu to select a specific alert and go directly to it.\n- **Manual Action** : While reviewing case information, you can initiate a manual action without leaving the **Cases** page. For more information, see [Perform a manual action](/chronicle/docs/soar/investigate/working-with-cases/perform-a-manual-action).\n- **Case Task** : You can add a case-specific task and assign it to a user or role, including yourself. For more information, see [Manage tasks from the Cases page](/chronicle/docs/soar/investigate/working-with-cases/manage-tasks-from-the-cases-screen).\n- **Alert Options** : For details about available options when working with alerts, see [Alert Options menu in the Cases page](/chronicle/docs/soar/investigate/working-with-cases/alert-options-menu-in-the-case-screen).\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
