To remove the details of an incident and any digital evidence that is linked to the
incident, you can delete a case and its associated files.
What you should know
You can manually delete a case or file even when there
is a retention policy active for the
case category. The retention period for the case begins to count down when the case
is closed and deletes associated files automatically after the retention period
(count down) is reached.
Note: Files that have been marked as Protected will not
automatically be deleted by the retention policy.
Important: You
must be included in the Delete cases and files security
policy to delete a case. Users must also have manage permission level for a
case to delete it.
Procedure
Open an existing case.
Click the Close case.
Click More().
Click Delete case.
A confirmation message is displayed: Are you sure you want to delete
this case? Case name.
(Optional) Select Delete all files attached to this case that are
not attached to any other case and then select one of the
following:
Click Delete case and files when you want to
delete a case and all the files that are associated with that
case.
Click Delete case only when you want to keep the
files that are associated with the case.
(Optional) If a case is protected, the Delete case
option is unavailable and a warning message is displayed. This case is
protected from deletion. You must clear the Protect from deletion check box
to delete this case.
Clear the Protect from deletion check box.
Click Delete.
The delete status is displayed. After the case is deleted, you are
automatically redirected to the case homepage.
The deleted case is marked for deletion and put in the recycle bin.
Example
After you finish
You can view or search in the recycle bin to understand when the case and any
associated files will be purged from the recycle bin. You can also view all active
retention policies. When the purge occurs, the case and any associated files are
permanently deleted from the Clearance database.
).
