Link Incidents - Administrator Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-28
Last date published
2024-03-21
End_of_Life
EoL
Category
Administrator Guide
Abstract

Link incidents in the Related Incidents tab, using a pre-process rule or in the CLI.

You can link or unlink incidents through the following:

After you link the incident, you can view linked incidents in the Case Info tab.

linked-incident.png