Quick Start Basics

The table lists the main things you can do in ICM. These tasks might vary depending on your business process.

Task Action
Start a new investigation or case

Create a case to start a new investigation or create an incident report to record any activities that might require further investigation.

See Creating cases or Create an Information or Incident Report.

A case is used as a container to hold information about an investigation. Your business unit may use different terminology.

Record information in an existing investigation or case

Create a case note to record these activities.

See Add a case note.

ICM uses case notes to record the activities that took place during an investigation, information gathered, and what was discovered as a result.

Record a reported or observed incident that might be investigated

Create an incident report to record any activities that might require investigation.

Record information that isn't related to any current investigation or case

Create an information report to record miscellaneous information that isn't related to a current investigation or case.

Assign work

Create a task from a case, case note, information report, or task result to assign work. You can use the Tasks feature to assign work to users.

See Creating a Task.

Record information about a person, address, phone number, and more

Open a source entity and create an entity. Entities are used to record information about real world items like people, addresses, and phone numbers.

You can only create entities in a case note, information report, task, or task result.

See Adding Entities to Source Entities.

Record links between entities

Open a source entity and record a relationship (or link) between entities.

You can create entity relationships in case notes, information reports, tasks, or task results.

See Entity to Entity Relationships.

Record images of entities

Open an entity and upload an image to associate it with the entity.

An image is saved as an image entity.

One image can be related to several entities.

Record information that relates to a different time zone

Select the time zone icon beside the date or time control in which you want to record information from another time zone.

See Time Zones.

Search for Information

Search entity types, cases, case notes, information reports, and specific entity types for the information you need.

See Searching.

Receive an alert when another user updates or looks at an entity

Place a watch on any entity. When a user interacts with the entity in a particular way, you receive an alert.

See Watches.

Combine information

Use any of these methods to collate intelligence:

  • Search for entities that are directly or indirectly related.

  • Use entity relationship diagrams to see graphical representations of related entities.

    See Diagrams.