Prioritize incidents with starring and scoring - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Cortex XSIAM
Creation date
Last date published
Administrator Guide

Prioritize and filter your incidents by using incident starring and incident scoring.

Cortex XSIAM provides incident starring and incident scoring to help you to prioritize your incidents.

Incident starring enables you to highlight and filter the incidents that you deem most important. Incident scoring assigns a numerical value to each incident to reflect its severity. Using these functions, you can easily compare incident scores, filter starred incidents, and prioritize your most urgent incidents.