Abstract
The Cortex Xpanse QRadar App supports multiple teams.
The Cortex Xpanse QRadar App supports multiple teams, including:
Security Operations Center (SOC)—The SOC team uses the QRadar App to integrate Cortex Xpanse Expander data into the organization’s security ecosystem to help triage alerts.
Incident Response (IR)—The IR team uses the QRadar App to pull in Cortex Xpanse Expander data to add context during incident response.