January 13, 2026—To enhance workflow efficiency for security analysts, auto-correlation
with new Workbench alerts is disabled once a case related to a Workbench insight is
closed. This ensures that completed investigations remain undisturbed, avoiding confusion
and the need for reinvestigation.
For more information, see Alerts correlated in Workbench insights.