Incidents and indicators investigation - After you ingest incidents and indicators, take action on the incident and indicator as part of your investigation. - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR enables you to centralize and manage every aspect of your investigations. Consolidate evidence, assign and review tasks, and leverage the Workplan to orchestrate your response. Deduplicate incidents and create and close them efficiently. For indicators, create, extract, and enrich them. For more information, see Indicator investigation.