Automate changes to Incident and Alerts to send to backend system

[PA_nts]

So looking at a way for when an analyst is working on an incident/case in XSIAM so that, if they add any notes, change the assignment, change severity, run commands in warroom etc - that these changes are sent automatically to a backend webhook via http post or API.

anyone done this before or know if possible?

thanks in adv

[PA_nts]

So looking at a way for when an analyst is working on an incident/case in XSIAM so that, if they add any notes, change the assignment, change severity, run commands in warroom etc - that these changes are sent automatically to a backend webhook via http post or API.

anyone done this before or know if possible?

thanks in adv

[etugriceri]

Hi

Thank you very much for this question. As of today, This is not directly possible but I would suggest to be in touch with your CSA or Account Team for potential workarounds by levering playbooks for some cases.