Incident configuration

Configure incidents, fields, and workflows in Cortex XSOAR 8 SaaS.

Tailor incidents to match your SOC workflow. Customize incident types, fields, and layouts for optimal clarity. Automate tasks with pre-process rules for deduplication and use post-processing scripts to take actions after remediation. Easily classify and map incidents, and personalize closed reasons for improved efficiency.