topic Re: Alert/Incident handling process template in Cortex XDR Discussions

Alert/Incident handling process template

AsifSid — Thu, 19 Nov 2020 06:04:24 GMT

Hi All,

Does any one have a sample template or document for Cortex alert /incident managment procedure.

Regards

Asif Siddiqui

Re: Alert/Incident handling process template

gjenkins — Thu, 03 Dec 2020 21:30:55 GMT

Hi AsifSid,

Here's a good document on investigating and managing incidents within Cortex XDR. It provides an in-depth walkthrough around incidents, including taking ownership, adjusting the status, reviewing details, gathering more information from external integrations, and taking action. There's even a video that you could watch to understand more about incident management here.

Finally, Cortex XDR recently rolled out a new feature called Remediation Suggestions. I'd recommend reviewing this video to understand its capabilities and how it can help you better-manage your incidents.

Please give these materials a look and let me know if you are looking for something else in particular.

Re: Alert/Incident handling process template

AsifSid — Wed, 10 Feb 2021 17:45:47 GMT

Thank you so much Gjenkins

Regards

Asif Siddiqui

Re: Alert/Incident handling process template

gjenkins — Thu, 11 Feb 2021 16:23:00 GMT

No problem, @AsifSid! Glad to help.