Blocking executions of IOC without showing any alerts

[Shashanksinha]

Hello , 

Please help us with the process of blocking of IOC process coming from various campaigns in cortex XDR . 

Regards,

Shashank

[bbarmanroy]

Hi @Shashanksinha you can create alert exclusions to prevent those alerts from getting created and also getting them stitched to incidents. Alternately, you can consider removing those IOC's from the IOC list if they are only being used for campaigns.

Ref: https://docs.google.com/spreadsheets/d/13K-RK6Y8mm508yu-xg93uyf1rvDAdBgE4q7OAUe15RE/edit#gid=1246474...