Host Field is not listed - Cortex XDR Prevent

[Balaraju]

Greetings ,

So if there is a alert/incident and no 'Host' listed , anyway to find it ? What other approach can be used if Hostname cannot be found for some reason . Thanks in advance 

[bbarmanroy · Accepted solution]

hi @Balaraju  As a tactical measure - look at the corresponding incident, and you'll be able to find the hostname.
Raise a support ticket with the incident and alert ID, and upload the support file for the endpoint for good measure.