Link Incidents - Administrator Guide - 6.9 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.9
Creation date
2022-09-29
Last date published
2024-05-22
End_of_Life
EoL
Category
Administrator Guide
Abstract

Link incidents in the Related Incidents tab, using a pre-process rule, or in the CLI.

You can link or unlink incidents through the following:

After you link the incident, you can view linked incidents in the Case Info tab.

linked-incident.png