---
title: Exclude security artifacts from a case
description: You can remove artifacts from the lists of supporting artifacts. They are not permanently removed and can be returned to the case as needed.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/exclude-records.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Security artifact exclusion and inclusion, Security artifact analysis, Security Case Management, Threat Intelligence, Enterprise security case management applications, Security Operations]
---

# Exclude security artifacts from a case

You can remove artifacts from the lists of supporting artifacts. They are not permanently removed and can be returned to the case as needed.

## Before you begin

-   The Threat Intelligence plugin must be activated to use Security Case Management.

Role required: sn\_ti.case\_user\_write

## Procedure

1.  Open a case that contains artifacts that you want to exclude from a list.

2.  Click the **Case Artifacts** related list.

3.  Click the tab associated with the artifacts you want to exclude.

    For example, click **Incidents** to exclude security incidents from the list.

4.  Select one or more artifact records that you want to exclude.

    \[Omitted image "exclude.png"\] Alt text: Exclude security incidents from the list

5.  From the **Actions on selected items** drop-down list, select **Exclude**.

6.  Click **Exclude** in the confirmation box.

    The selected artifacts are removed from the list.


**Parent Topic:**[Security artifact exclusion and inclusion](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/artifact-inclusion-exclusion.md)

**Related topics**  


[Return excluded security artifacts to a case]()