When you determine that an alert requires further action, you can add it to a case. You can add the alert to existing cases or create a new case. For more information about cases, see Working with cases.
Note
Only alerts that are in an Open or Reopened status can be used to create cases.