Hello @CraigV123 ,
Greetings for the day.
SME's insight is largely correct regarding the current feature set. The Autonomous SOC workflows—which provide out-of-the-box recommendations and automated remediation for Analytics-based detections—are enabled by default for XSIAM 3.5+ customers.
- XSIAM (Current):
-Features Autonomous SOC workflows that provide fully managed remediation for threats detected by the Analytics Engine.
-It also includes Agentic Issue Response (currently in Beta), which allows Automation Rules to act on issues based on LLM-driven prompts.
- XDR Pro (Future/Limited):
-While XDR Pro 5.1+ includes many platform enhancements, the specific Autonomous SOC workflows for automatic remediation of Analytics threats are listed as "XDR in future versions".
-In XDR Pro, playbooks are primarily used for manual or rule-based automation (such as enrichment or containment) rather than the proactive "recommendations" seen in XSIAM's autonomous framework
If you feel this has answered your query, please let us know by clicking Like and on "mark this as a Solution".
Thanks & Regards,
S. Subashkar Sekar
