10-07-2025 05:09 AM
Hello,
Can you please explain the difference between the causality chain of the 2 attached photos?
What exactly are the executions?
10-10-2025 04:55 AM - edited 10-10-2025 04:58 AM
Hi @PaloAltorrr
I see that in 1 pic you have executions with the causality chain corresponding to a process execution chain
The other pic is a different area of XDR information "issues and insights" here you find alerts on suspicious/malicious actions if you find the same execution there as in the previous execution pic, you might get to the same causality chain.
Those pics are from different things not to mix with each other
In the second pic we cant see what is underneath the menu that allows you to select the opening of a new card.
So I cant se if you are selecting an action that might bring you to the same execution or a different one.
Concepts:
Issues = Alerts
Insights might be the low severity alerts that dont open incidents but can be added as enrichment at the Issues and Insights area
If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution".
Thank you.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
