Is there anyway for all alerts generated by a list of hosts / ips / users to all be added to one case automatically? The idea being that during a pentest we don’t want to have to triage the alerts at that time, but don’t want to disabled them as we want to see what would have been caught.