To view previous enrichment attributes and relevant historical cases for an entity with the fewest steps, what should you do?

• A. View Details for the entity in the Entity Highlights widget.
• B. Initiate a SIEM Search to query the entity.
• C. Initiate a SOAR Search to query the entity.
• D. Select the entity identifier in the Entity Highlights widget to open Entity Explorer.

Answer: (D)

To see previous enrichment attributes and relevant historical cases quickly, open the centralized view that houses all details for an entity. Selecting the entity identifier in the Entity Highlights widget opens Entity Explorer, which brings up the enrichment data and past cases tied to that entity in one place. This is the fastest path because it directly accesses the entity’s complete history and attributes without needing to run searches or navigate through separate widgets. Viewing details in the widget may show basic info but won’t reliably present the full enrichment history, and running SIEM or SOAR searches adds extra steps and doesn’t guarantee immediate access to the historical cases tied to the specific entity.