Your security team uses Security Command Center Premium to triage findings across the organization. During an investigation, analysts want to tag a subset of critical findings on production assets as 'under-investigation' so that these findings can be filtered in dashboards and excluded from routine reporting queries, without altering the finding's underlying state or affecting detection. What is the recommended way to accomplish this?