The **Incident Review** dashboard is where analysts triage, investigate, and manage **Notable Events**.
A notable event is generated by a Correlation Search when a specific security policy or threshold is violated.
Analysts can change the status (New, In Progress, Closed), assign the event to an owner, and execute Adaptive Response Actions directly from this dashboard.