Issue investigation actions

Use issue actions to investigate, enrich, and remediate issues in Cortex XSIAM.

The following topics explain different actions you can take on issues in Cortex XSIAM.

• Copy issues

• Analyze an issue

• Update issue fields

• Query case and issue data

• Exclude an issue

• Create a featured field

• Export issue details to a file

• Investigate contributing events

• Retrieve additional issue details

• View generating BIOC or IOC rule

• Create profile exceptions

• Add a file path to a malware profile allow list

• Close an issue