Which set of steps will show the most detailed information for action results on the Investigation page?

Question

Options

• AViewing the evidence tab within the main display area.
• BViewing the action widget within the main display area.
• CClicking on the action within the recent activity pane.
• DClicking the arrow next to the action within the recent activities pane.

• A
  2% (1)
• B
  4% (2)
• C
  2% (1)
• D
  92% (44)

Explanation

Clicking the arrow next to an action in the recent activities pane expands that specific action to reveal its full, granular details - this drill-down mechanism is designed precisely to surface the most comprehensive result information available for any single action. Option C is a distractor because simply clicking the action itself may navigate to a summary view or select it, but does not expand the detailed result output that the arrow toggle provides. Option B is wrong because the action widget in the main display area gives a higher-level overview of actions, not the deepest level of detail for a specific result. Option A is wrong because the evidence tab surfaces artifacts and supporting data tied to the investigation, not the step-by-step action result details.

Memory tip: Think "arrow = expand = more." Whenever an interface offers both a clickable item and an arrow next to it, the arrow almost always means "show me everything" - the item click gives you a summary, the arrow gives you the full story.

No community discussion yet for this question.