Incident Starring - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2024-03-28
Last date published
2024-05-24
Category
User Guide
Solution
Cloud
Abstract

Create an incident starring configuration that categorizes and stars incidents when alerts contain attributes that you decide are important.

To help you focus on the incidents that matter most, you can star an incident. Cortex Xpanse identifies starred incidents with a star icon. You can then sort or filter the Incidents table on starred incidents. You can also choose whether to display all incidents or only starred incidents on the Incident Management Dashboard.

Star a Specific Incident

To manually star an incident during or after investigation:

  1. Select Incident ResponseIncidents.

  2. From the Incident List, locate the incident you want to star.

  3. Select the star icon, or right click on the incident and select Star Incident.