Abstract
Link incidents in the Related Incidents tab, using a pre-process rule, or in the CLI. Cortex XSOAR.
You can link or unlink incidents through the following:
In the Related Incidents tab.
A pre-process rule, so that as soon as an incident is ingested into Cortex XSOAR you can link incidents.
Using the CLI.
After you link the incident, you can view linked incidents in the Case Info tab.
 |