Causality Group Owner (CGO) - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Causality Group Owner (CGO). The causality chains are listed according to the CGO, also called the causality actor. The CGO is the process that is responsible for all the other processes, events, and alerts in the chain.