[Yandex Cloud documentation](../../../index.md) > [Yandex SIEM](../../index.md) > [Step-by-step guides](../index.md) > [Investigations](index.md) > Working with the investigations list

# Working with the investigations list

{% note info %}

This feature is in the [Preview](../../../overview/concepts/launch-stages.md) stage. To get access, contact [tech support](https://center.yandex.cloud/support) or your account manager.

{% endnote %}

This section describes how to work with the investigations list: filter investigations by date, search by name and tags, and sort by modification date.

## Getting started {#before-you-begin}

The Yandex SIEM section will appear in the Cloud Center interface as a Security Deck module after the access request is approved.

You need the `ycem.editor` [role](../../../iam/roles-reference.md#ycdr-admin) to use the service.

## Opening the investigation list {#open-list}

To open the investigation list:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Go to [Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select **Yandex SIEM**.
  1. Navigate to the **Investigations** tab.

  The list displays all investigations for which you have access permissions.

{% endlist %}

## Filtering by creation date {#filter-date}

To filter investigations by creation date:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Navigate to **Investigations**.
  1. Click the date filter.
  1. Select a period:
     * Certain date.
     * Date range.
  1. Apply the filter.

  The list will refresh to only show investigations created within the selected period.

{% endlist %}

## Searching by name or tag {#search}

To find an investigation:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Navigate to **Investigations**.
  1. Enter your keywords in the search field.
  1. The results will be displayed automatically.

  The system will search for keywords in the following fields:
  * Investigation name.
  * Investigation description.
  * Tags.

  {% note tip %}

  Use tags for quick category-based searches, e.g., `prod`, `security-incident`, `february-2024`.

  {% endnote %}

{% endlist %}

## Sorting by modification date {#sort}

To sort investigations:

{% list tabs group=instructions %}

- Cloud Center UI {#cloud-center}

  1. Navigate to **Investigations**.
  1. Click the **Modified** column header.
  1. Select the sort order:
     * Ascending, i.e., from oldest to newest.
     * Descending, i.e., from newest to oldest.

  By default, investigations are sorted by modification date in descending order.

{% endlist %}

## Viewing investigation information {#view-info}

The investigations list displays the following details for each investigation:

* **Name**: Brief description of the investigation's purpose.
* **Creation date**: Timestamp when the investigation was created.
* **Last modified date**: Timestamp of the most recent modification.
* **Tags**: Keywords to group and search for investigations.

To open an investigation, click its name in the list.

#### Useful links {#see-also}

* [Investigations](../../concepts/investigations.md)
* [Queries](../../concepts/queries.md)
* [Investigation management](manage-investigations.md)
* [Working with queries](../queries/index.md)