https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/automate-changes-to-incident-and-alerts-to-send-to-backend/m-p/1230683#M8366 <P>Hi</P> <P>Thank you very much for this question. As of today, This is not directly possible but I would suggest to be in touch with your CSA or Account Team for potential workarounds by levering playbooks for some cases.</P> <P>&nbsp;</P> Mon, 02 Jun 2025 10:50:29 GMT etugriceri 2025-06-02T10:50:29Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/automate-changes-to-incident-and-alerts-to-send-to-backend/m-p/1230165#M8348 <DIV id="bodyDisplay" class="lia-message-body lia-component-message-view-widget-body lia-component-body-signature-highlight-escalation lia-component-message-view-widget-body-signature-highlight-escalation"> <DIV class="lia-message-body-content"> <P>So looking at a way for when an analyst is working on an incident/case in XSIAM so that, if they add any notes, change the assignment, change severity, run commands in warroom etc - that these changes are sent automatically to a backend webhook via http post or API.</P> <P>&nbsp;</P> <P>anyone done this before or know if possible?</P> <P>thanks in adv</P> </DIV> </DIV> Tue, 27 May 2025 10:07:09 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/automate-changes-to-incident-and-alerts-to-send-to-backend/m-p/1230165#M8348 PA_nts 2025-05-27T10:07:09Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/automate-changes-to-incident-and-alerts-to-send-to-backend/m-p/1230683#M8366 <P>Hi</P> <P>Thank you very much for this question. As of today, This is not directly possible but I would suggest to be in touch with your CSA or Account Team for potential workarounds by levering playbooks for some cases.</P> <P>&nbsp;</P> Mon, 02 Jun 2025 10:50:29 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/automate-changes-to-incident-and-alerts-to-send-to-backend/m-p/1230683#M8366 etugriceri 2025-06-02T10:50:29Z