Skip to main content

Dispatch Incident - Vectra XDR

This Playbook is part of the Vectra XDR Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.8.0 and later.

This playbook is called from the Process Incident - Vectra XDR playbook. It will fetch all active detections for the entity under investigation. It will then assign the entity to a user; if an assignment already exists, it will update that assignment and add a note in Vectra.


This playbook uses the following sub-playbooks, integrations, and scripts.


This playbook does not use any sub-playbooks.


  • VectraXDR


  • DeleteContext


  • vectra-entity-assignment-update
  • vectra-assignment-list
  • vectra-entity-detection-list
  • vectra-entity-note-add
  • vectra-entity-assignment-add

Playbook Inputs#

NameDescriptionDefault ValueRequired
UserIDUser ID for entity assignment.Optional

Playbook Outputs#

There are no outputs for this playbook.

Playbook Image#

Dispatch Incident - Vectra XDR