topic Re: Notification via Mail - Improvement in Cortex XDR Discussions

Notification via Mail - Improvement

RFeyertag — Fri, 05 Jul 2024 19:56:03 GMT

Hello!

Changes are coming with 3.11, but for improvement put this information directly into mail:

Source
Category
Action
Host
Username
Starred Alert
Excluded Alert
Alert ID
Incident ID
actor_process_image_path
actor_process_image_name
actor_process_command_line
actor_process_image_sha256
causality_actor_process_image_path
causality_actor_process_image_name
causality_actor_process_command_line
causality_actor_process_image_sha256
os_actor_process_image_path
os_actor_process_image_name
os_actor_process_command_line
os_actor_process_image_sha256

If you like to do it the sexy way, let us choose what we want to see.

Rob

Re: Notification via Mail - Improvement

aspatil — Thu, 11 Jul 2024 10:10:03 GMT

Hello @RFeyertag ,

Thanks for reaching out on LiveCommunity!

This may create the email noisy. All the required information is provided with JSON file is attached to the email.

However, we welcome your suggestion. Please open FR for the same.

If you feel this has answered your query, please let us know by clicking on Like and "mark this as a Solution".

Re: Notification via Mail - Improvement

Rindsland — Tue, 30 Jul 2024 11:46:05 GMT

We also want it like the old way, instead as attachment.

It would also be a cool thing, to configure what is showing directly inside the Mail.

I am pretty sure that also other customers would like to see this.

Best regards

Marcus

Re: Notification via Mail - Improvement

nbichsel — Tue, 30 Jul 2024 12:58:24 GMT

The notification email is my biggest pain point.
I can't have XDR send that email with everything and expect our night shift techs to be able to decern if waking me up is important or not.

Re: Notification via Mail - Improvement

Rindsland — Wed, 14 Aug 2024 12:57:13 GMT

FR?