Monitor Cortex XSIAM Incidents - Incidents are aggregates of alerts relating to a single event and can be monitored from the Incidents page. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

The Incidents page displays all incidents in the Cortex XSIAM management console to help you prioritize, track, triage, investigate and take remedial action.

See Investigate Incidents for more information.