To
help you focus on the incidents that matter most, you can star an
incident.
Cortex
XDR
a identifies
starred incidents with a purple star. You can star incidents in
two ways: You can manually star an incident after reviewing it,
or you can create an incident starring configuration that automatically
categorizes and stars incidents when a related alert contains the
specific attributes that you decide are important.