SOC Operations, Investigation & Response permissions - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

This section includes all the daily operational tools primarily used by Tier-1 through Tier-3 analysts and Threat Hunters for triage, investigation, and case response.