Investigations often span multiple Notable Events. The Case Management capability allows analysts to link disparate events into a single, cohesive investigation.
Engineers configure case schemas and default task lists to enforce structured investigations.