Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
09-27-2022 06:18 PM
Hi @Josep,
The current XDR integration does not have a command to update alerts. I would suggest raising a Feature Request at https://xsoar.ideas.aha.io/ideas. You can also write the additional API call yourself if required, refer https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-api/cortex-xdr-apis/incident-manageme...
Once you have the API call and the command added to the integration, you can configure a post-processing script to run when the XSOAR incident is closed. This script can be configured to close all related XDR alerts.
