You can add an event displayed on the Investigation tab to the current pivot as an evidence detail.
To add event data to a pivot
- Highlight one or more events in the Investigation tab.
- Select Add to Investigation from the Actions menu.
- The Add to Investigation popup appears.
- Enter a reason, and click Add.
- Investigation Workflow adds the selected events to the Pivot section of the investigation history pane. Click the Details link to display it.