Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=assign-cases

Assign cases

This section is only for automatically generated cases that show "Self" in the "Managed By" column.

You can assign cases to your admins for analysis as follows:

  1. Go to Threat Analysis Center > Cases to see a list of cases.
  2. Click the Case ID next to a case to see its details.

  3. In the Case details page, the Overview tab is open by default. Do as follows:

    1. Click the drop-down menu next to the case name and set the severity level to Critical, High, Medium, Low, or Info.
    2. Change the status from New to Investigating, if you're ready to start.

    3. In Owner, select the administrator you want to assign the case to. If the administrator you want isn't listed, click Add user and add them.

      You can select the owner later if you want to.

    4. In Case summary, use Sophos AI to generate a case summary, or enter a summary manually.

    Case details page.

    For advice on investigating a case, go to Investigate cases.

Note

We notify Sophos Central admins about new cases if you set up email notifications for them. See Email notifications.