Our users should be able to create Cases to investigate security issues. The security analyst can attach events to its cases to keep track and correlate the results of its investigation.