Causality Group Owner (CGO) - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2024-05-22
Category
Administrator Guide

Causality Group Owner (CGO). The causality chains are listed according to the CGO, also called the causality actor. The CGO is the process that is responsible for all the other processes, events, and alerts in the chain.