Abstract
Learn about incident and indicator management in Cortex XSOAR.
After you have set up and configured Cortex XSOAR, you can now start to manage the following:
Managing incidents: Includes the actions available to investigate an incident, how to link incidents, manually de-duplicate incidents, etc. If you want to configure incidents, see Incident Customization.
Managing indicators: Includes how to create an indicator, create indicator relationships, extract indicators, etc. If you want to configure indicators, see Indicator Customization.