This template will help you understand and leverage the UCD to benefit implementation strategy, understand how your Incident Response (IR) process fits into XSIAM, and identify integrations for ingestion/enrichment needed.
The XSIAM Use Case Definition Template is a key document for identifying automation, integration, correlation, and workflow needs before building a playbook. It helps us translate your IR process into XSIAM terms.
We can then focus on the goals and identify challenges ahead of time.
You may review and download the UCD template HERE
We recommend reviewing the Cortex XSIAM How-to Video: Use Case Definition (UCD) before working on your UCD.
Have a question? Post it on our Discussion Forum
