Direct, immediate email notification to a specific individual based solely on incident assignment is currently a product limitation in standalone Cortex XDR. While you can configure notifications for when an incident is assigned, these typically go to a predefined distribution list rather than dynamically routing to the specific assignee's email address.

However, there are ways to manage and configure incident/case notifications depending on your version and environment:

1. General Assigned Incident Notifications (Distribution List)

You can configure Cortex XDR to send an email to a team distribution list whenever any incident is marked as Assigned.

Navigate to Settings → Configurations → General → Notifications.
Click + Add Forwarding Configuration.
Set the Log Type to Alerts or Incidents (depending on your version).
Filter the Sub-type field and select Assigned Incident.
Under Distribution List, enter the email address or group address that should receive the notification.

2. User Notifications (Cortex XDR 4.0 / XSIAM)

In newer platform versions, notifications are triggered when a case is resolved or assigned, and these are sent to the assigned user.

Users can manage these personal notifications through Default User Notifications in their profile settings.

topic Re: Get notified when a case is assigned in Cortex XDR Discussions

Get notified when a case is assigned

Re: Get notified when a case is assigned

1. General Assigned Incident Notifications (Distribution List)

2. User Notifications (Cortex XDR 4.0 / XSIAM)