Case management
Case management groups alerts, evidence, tasks and decisions for one incident in a record that analysts share. In a response platform it is where an automated action is logged next to the analyst notes. Its depth varies from a ticket list to a full timeline of actions.
Definition
For containment the question is whether the case records what the platform did, with time and outcome, or only what people wrote. The first is an audit trail. The second is a diary.
Check whether cases can be exported and whether closure notes are drafted from recorded actions, as some vendors say they are.
Case management in Tines's documentation
Tines' documentation lists a Cases section and the product pages list a Cases add-on under Tines 3B, described as case and incident management with a collaborative workspace. vendor claim tines.com, read
The example names a vendor and its own page. A vendor's use of Case management may differ from the definition above; the rubric uses the definition on this page.