Attachments

doc/3.2.1/Working With Finder/Using Investigation Templates

Contents

  1. Investigation Template
  2. Creating a template
  3. Running a template investigation

1. Investigation Template

For commun or frequently used investigations, only depending on some variables objects or attributes, you can use the investigation templates. With a template, you can select one or more parameters within the investigation as custom fields. These parameters will be completed by the user in the template form during the execution of the investigation template.

2. Creating a template

Create or edit an existing investigation.

On existing or new conditions, by clicking on ContextualTemplateCustomParam.png icon, it enables end-user customization for the parameter choosed.

  • CreatingATemplate1.png

  • CreatingATemplate2.png

To disable, click again on the icon.

3. Running a template investigation

A template investigation is identified by the TemplateCustomParam.png icon on top of to the object icon.

  • TemplateInvestigationAsTemplate.png

By running the investigation template, the free parameters must be completed by the user in order to display the result.

  • RunATemplate.png

Apply the parameter and get the result for the retrieved investigation.

  • TemplateResult.png

Based the resulting investigation, the following actions are available.

  • TemplateAdvancedOptions.png

  • Save the template with the current paramaters as an investigation
  • Edit the template parameters
last modified 2010-02-23 14:24:27