Incidents and indicators investigation

Investigate incidents and indicators in Cortex XSOAR 8.10 On-prem.

Cortex XSOAR enables you to centralize and manage every aspect of your investigations. Consolidate evidence, assign and review tasks, and leverage the Workplan to orchestrate your response. Deduplicate incidents and create and close them efficiently. For indicators, create, extract and enrich them, and explore their relationships to gain deeper insights. If you have a TIM license, see the Indicator investigation section for more features, such as creating a Threat Intel Report.