Cases are usually active investigations, which may span multiple events, entities and documents.
They can be directly escalated into a suspicious activity report.
The /cases endpoint can create, list, and update cases.
Cases are usually active investigations, which may span multiple events, entities and documents.
They can be directly escalated into a suspicious activity report.
The /cases endpoint can create, list, and update cases.