Forum Discussion
Timeline SNAFU
I noticed when looking at the Timeline while investigating an indecent that it was messed up. The date/times shown do not match what what I see in the Incident list and actually some of the dates ar...
ill check with the team, this might be the incident created time vs the security alert creation time.
in the meantime, understand that asking for related alerts in investigation is querying SecurityAlert for that entity. Not all security alerts are incidents.
you dont have other security alerts in the workspace right? just the ones that are from the incidents shown?