Refer to SAS AML8.3, the system is only allow the user to perform any actions on the most recent snapshots (SFEs) for the suspicious activity that has been discovered. This is not allowed the user to add/edit the information of the previous alert.
This affects the work process of user as below
1) If the user record the wrong investigation or need to re-investigated the information in the previous alert.
2) The user need to see the attachment in alert level
So, the expectation from the customer are
1) When the new Alert is generated, the user should be able to ‘Edit’ some information in ‘the previous Alert’ such as.. ‘Rate productivity’ to put the comment (in Fired Event Level) for that alert
2) The user can distinguish between the attachment of alert level
