Case resolution center - no recommendations

[CraigV123]

Hello.

I have never seen any recommendations in the resolution center when reviewing cases. Respective playbooks are configured and enabled; however, there's nothing. Our Palo SME stated it might be an XSIAM thing and not and XDR Pro thing, but I feel like something should be there. Anyone have any insight to this or tips? Thank you.

[susekar · Accepted solution]

Hello @CraigV123 ,

Greetings for the day.

SME's insight is largely correct regarding the current feature set. The Autonomous SOC workflows—which provide out-of-the-box recommendations and automated remediation for Analytics-based detections—are enabled by default for XSIAM 3.5+ customers.

• XSIAM (Current):
  -Features Autonomous SOC workflows that provide fully managed remediation for threats detected by the Analytics Engine.
  -It also includes Agentic Issue Response (currently in Beta), which allows Automation Rules to act on issues based on LLM-driven prompts.
  
  
• XDR Pro (Future/Limited):
  -While XDR Pro 5.1+ includes many platform enhancements, the specific Autonomous SOC workflows for automatic remediation of Analytics threats are listed as "XDR in future versions".
  -In XDR Pro, playbooks are primarily used for manual or rule-based automation (such as enrichment or containment) rather than the proactive "recommendations" seen in XSIAM's autonomous framework

If you feel this has answered your query, please let us know by clicking Like and on "mark this as a Solution".

Thanks & Regards,
S. Subashkar Sekar

[CraigV123]

I appreciate the clarification. I thought I was doing something wrong 🙂