topic Generate Investigation Summary Report in Cortex XSOAR Discussions

Generate Investigation Summary Report

Himangi — Mon, 10 Jul 2023 10:32:47 GMT

I have used the automation Generate Investigation Summary Report to generate a report of particular incident. But I am not getting full content in the report that is being generated. In war room I can see details but in the generated report information is missing.
Like I have added a task to check IP reputation, but in the report nothing is there related to IP reputation.

Can anyone please suggest me the solution..

Re: Generate Investigation Summary Report

akoppad — Mon, 10 Jul 2023 14:29:58 GMT

Hi Himangi,

You can try adding the IP reputation task result as evidence. This will pull those results into the report in the evidence section. You can also set this at the playbook task level. You can do so by navigating to the advanced section and select the option mark as evidence. This will mark the result of the IP reputation as an evidence and will be included in the investigation summary report.