TT Score

Opening and Managing Investigations

Opening and Managing Investigations

TT Score provides you with an integrated case management system where you can open investigations, assign owners to manage the investigation, add attachments, and track the matter's progress.

Note: Only users with TT Score Administrator permissions can open, view, and modify investigations.

Opening an investigation in TT Score

Investigations can be opened from the following views of your selected data:

Opening an investigation from the Alerts Cluster Group

  1. Click the View Alerts icon on the TT Score homepage.

  2. Select an alert and click Investigate.

  3. In the Investigation Options screen, enter a name for the investigation, select whether you want to add the investigation report to an existing investigation, and click Add.

Opening an investigation from the Cluster Scorecard

  1. Click the List View icon on the TT Score homepage.

    Note: You can also get to the List view with a left-click in a Heat Map block.

    Tip: If you click View Clusters while viewing an alert, it will also take you to the List View for the cluster.

  2. Select a cluster event and click Inspect Cluster.

  3. Click Investigate in the Cluster Statistics Scorecard Metrics section.

  4. In the Investigation Options screen, enter a name for the investigation, select whether you want to add the investigation report to an existing investigation, and click Add.

Managing an investigation in TT Score

From the TT Score homepage, you can view existing investigations. Within each investigation report you can track the investigaton's progress, assign a different owner to manage the investigation, and add comments or a final disposition with attachments.

To manage an investigation:

  1. Click i on the TT Score homepage.

  2. Select an investigation and click View Investigation.

    The Investigation screen appears.

    The following sections are included on this screen:

    • Clusters — Lists the clusters being investigated.
    • Alerts — Lists the alerts being investigated.
    • State History — Shows a history of state changes, and allows you to change the status.
    • Owner History — Shows a history of owners assigned to the investigation, and allows you to change owners.

      Note: Only users with TT Score Administrator permissions are listed in the owner selector.

    • Comment History — Shows a history of comments added to the investigation, and allows you to add comments or a final disposition and upload attachments.

      Note: A previously added comment cannot be edited or deleted. To address a previously added comment, you must add a new one.

  3. To change the investigation status, click the selector to choose the new status and click ASSIGN STATE in the State History section.

  4. To assign a new owner to the investigation, click the selector to choose the new owner and click ASSIGN OWNER in the Owner History section.

  5. To add comments or upload attachments, use the Comment History section.