Stay organized with collections
Save and categorize content based on your preferences.
Each case contains one or more alerts which hold the information you need to
understand the security incident. Click the Alert tab to display the related
entities and events, as well as any playbooks that were triggered by its
ingestion.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[],[],null,["# Working with alerts\n\n| Enterprise [service tier](/security-command-center/docs/service-tiers)\n\nEach case contains one or more alerts which hold the information you need to\nunderstand the security incident. Click the **Alert** tab to display the related\nentities and events, as well as any playbooks that were triggered by its\ningestion.\n\nFor more information, see\n[What's on the alert overview tab?](/chronicle/docs/soar/investigate/working-with-alerts/whats-on-the-alert-overview-tab)"]]
