I successfully configured and integrated xdr into Xsoar but in xsoar incidents page it gets all common incidents from XDR but i need to get only my own endpoint user incident there is a filter option in the xdr incident to use and check your own end user, check the results, but what about xsoar? How can i do this? Should I change the classification and mapping to use a manual filter to use my own endpoint username filter in xsoar? or any other way to get my own endpoint incident in xosar?
... View more