--- title: "Case Notes | ThreatConnect" slug: "case-notes" description: "This article describes how to add Notes to a Workflow Case, manage existing Notes, and link Notes to a Task or Artifact in a Case." tags: ["Case Management", "Markdown"] updated: 2024-11-06T21:36:10Z published: 2024-11-06T21:36:10Z --- > ## Documentation Index > Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt > Use this file to discover all available pages before exploring further. # Case Notes ## Overview A Note in Workflow is freeform information entered by a user (e.g., in a [Workflow Case](/v1/docs/workflow-cases) or attached to a Task or Artifact). Notes can be used to provide commentary, directives to another user, additional details, or any information that cannot be captured elsewhere. They enable security teams to journal key data findings in an unstructured format. The **Notes**card of a Case displays all Notes added to the Case. This article describes how to add Notes to a Case and manage existing ones, as well as how to link Notes to a [Task](/v1/docs/phases-and-tasks) or [Artifact](/v1/docs/artifacts) in a Case. ## Before You Start | Minimum Role(s) | - Organization role of Read Only User (for viewing Notes) - Organization role of Read Only Commenter (for creating Notes and editing those created by the user) - Organization role of Organization Administrator (for editing Notes, regardless of which user created them, and deleting Notes) | | --- | --- | | Prerequisites | - Workflow enabled by a System Administrator - A [Workflow Case created in your Organization](https://knowledge.threatconnect.com/docs/creating-cases) | ## Notes Card Figure 1 shows an example of the **Notes**card for a Case, which is located below the [**Artifacts**card](/v1/docs/artifacts-card) on the right side of the screen displaying the Case. NoteTo collapse or expand the Notes card, hover the cursor anywhere in the card and click the arrow displayed at the upper-right corner of the card.![Figure 1_Case Notes_7.7.1](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%201_Case%20Notes_7.7.1.png) Each Note lists the user who added the Note, the date and time when the Note was added, the contents of the Note, and, if relevant, information about other elements of the Case to which the Note is linked. ## Adding Notes To add a Note to the Case, click the **New… ![Diagram Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Add%20button.png)**button at the upper-right corner of the Case select **Note**, or hover the cursor over the **Notes**card and click **New Note****![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Plus%20icon_Gray.png)**at the upper-right corner of the card. The **Create Note**drawer will be displayed (Figure 2). ![Graphical user interface, application, Teams Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%202_Case%20Notes_7.7.1.png) - Enter the contents of the Note in the text box, which supports [Markdown](https://www.markdownguide.org/). NoteThe text box supports the Marked library ([https://marked.js.org/](https://marked.js.org/)). - Once you have entered text in the text box, a **word bubble**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Word%20Bubble%20icon_Workflow.png)icon will be displayed at the top right of the **Create Note**drawer. Click this icon to preview the Note, if desired (Figure 3). ![Graphical user interface, text, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%203_Case%20Notes_7.7.1.png) - Use the **word bubble**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Word%20Bubble%20icon_Workflow.png)and **pencil**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Pencil%20icon_Light%20gray.png)icons to toggle between edit and preview mode. - Click the **Expand**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Expand%20icon_Gray.png)icon to view the Note in full-screen mode. - Click the **CREATE**button to save the Note. The Note will be added to the Case and displayed at the bottom of the **Notes**card. ## Managing Notes Hovering over a Note will display three icons on its right side (Figure 4). ![Text, letter Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%204_Case%20Notes_7.7.1.png) ### Removing Notes To remove a Note, click the **⋮**menu in Figure 4 and select **Remove**. ### Previewing Notes Click the **Expand**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Preview%20Note%20icon.png)icon in Figure 4 to view the full Note. The **Preview Note**drawer will be displayed (Figure 5). ![A screenshot of a computer Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%205_Case%20Notes_7.7.1.png) - ![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Pencil%20icon_Light%20gray.png): Click this icon to edit the Note. See the [“Editing Notes”](/docs/case-notes#editing-notes) section for more information. - ![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Expand%20icon_Gray.png): Click this icon to view the Note in full-screen mode. ### Editing Notes Click the **Edit**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Edit%20Note%20icon.png)icon****in Figure 4 to edit the Note. The **Edit Note**drawer will be displayed (Figure 6). ![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%206_Case%20Notes_7.7.1.png) - Click in the text box to edit the contents of the Note. - ![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Word%20Bubble%20icon_Workflow.png): Click this icon to preview the Note. See the [“Previewing Notes”](/docs/case-notes#previewing-notes) section for more information. - ![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Expand%20icon_Gray.png): Click this icon to view the Note in full-screen mode. - Click the **SAVE**button to save any changes made to the Note. ## Note Links When a Note is linked to a specific [Task](/v1/docs/phases-and-tasks) or [Artifact](/v1/docs/artifacts), a Note link is displayed at the bottom of the Note, as shown for the first and third Notes in Figure 1. For Notes linked to Tasks, hovering the cursor over the name of the Task to the right of the **Linked to Task:** text will display the full description of the Task, the Task assignee, and information on the Task’s dependency, if any (Figure 7). ![Graphical user interface, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%207_Case%20Notes_7.7.1.png) NoteAll Tasks on a given instance of ThreatConnect are assigned a unique identification number. These numbers are typically not displayed in the user interface, with the exception of this window. Notes that are linked to completed Tasks also show that the Task has been completed, as well as the date on which the Task was completed (i.e., the date to the right of the **Due:** text) (Figure 8). ![A screenshot of a social media post Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%208_Case%20Notes_7.7.1.png) For instructions on creating a Note linked to a Task, see the [“Add Note” section of *Task Administrative Options*](/v1/docs/task-administrative-options#add-note). For Notes linked to Artifacts, hovering the cursor over the name of the Artifact to the right of the **Linked to Artifact:** text will display the contents of the Artifact and its type (Figure 9). ![A screenshot of a cell phone Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%209_Case%20Notes_7.7.1.png) For instructions on creating a Note linked to an Artifact, see the [“Add Note” section of *Artifact Administrative Options*](/v1/docs/artifact-administrative-options#add-note). ## Filtering Notes ### FILTERS Selector Use the **FILTERS**selector at the top left of the **Notes**section to filter Notes by date added and the user who added the Note. After making your selections, click **APPLY**in the **FILTERS**selector to apply the filters to the Notes. When filters have been applied, an orange circle![Logo, icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/FILTER_Orange%20circle.png)will be displayed at the upper-left corner of the **FILTERS**selector. This element alerts you to the fact that you might be viewing an “incomplete” set of data. ### Filtering Notes by Name Use the search bar to the right of the **FILTERS**selector to filter Notes by name (i.e., the contents of the Note). --- *ThreatConnect® is a registered trademark of ThreatConnect, Inc.* 20127-01 v.01.E ## Related - [Artifacts](/artifacts.md) - [Parts of a Case](/parts-of-a-case.md) - [Phases and Tasks](/phases-and-tasks.md) - [The Cases Screen](/the-cases-screen.md) - [Workflow Overview](/workflow-overview.md)