Add Case Category/Tag query to the default dropdown menu in the Cases interface

[j-bernal]

Add the below query to the cases default dropdown menu to display all cases; new, in progress, or closed. This will enable organizations to track cases throughout a defined time period which will enhance attack metrics. I recommend inserting this below the Closed case option in the dropdown menu.

Configuration Interface entry:
{"name":"Case Categories/Tags","query":"* | groupby so_case.category* so_case.tags* so_case.status"}