Citations connect the Threat Brief to evidence on the Timeline. They let you verify each claim in the AI summary without hunting through unrelated events.
When the brief references a concrete action or pattern, TOTAL can mark that span as a citation. The marked text and the corresponding timeline entry describe the same underlying observation, so narrative and evidence stay aligned.
Citations use visual emphasis in the brief—typically underline or highlight—so they stand out from normal prose. Not every sentence is cited; emphasis appears where there is a direct link to a timeline row you can inspect.
Use the timeline on the right to find the event or drift pattern that matches the cited phrase. Expand the row for full detail text and use View Metadata when you need raw fields or provenance. See Timeline for event types and expansion behavior.
