Issue feed - See a chronological visualization of the case lifecycle in the issue feed. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-11
Category
Administrator Guide
Abstract

See a chronological visualization of the case lifecycle in the issue feed.

The issue feed provides a chronological visualization of the case lifecycle, highlighting key case information from initial detection to the most recent activity. Key features include:

  • Issue count: See the total number of issues linked to the case.

  • High level details: Review issue details in the timeline, or click an issue to open the full issue card. When an issue is resolved, the issue status and title is dimmed.

  • Contextual insights: View integrated insights directly within the timeline (when available), providing extra layers of intelligence on why specific events were flagged.

  • Unified progression: Gain immediate clarity on the speed of an attack, helping you distinguish between rapid automated threats and slow-moving lateral movement.

  • Group issues by attribute: Sort the issues in the timeline with the Group By option that allows you cluster issues and insights by selected criteria, such as category, severity, or detection method.