Vectra XDR Pack.#This Playbook is part of the
Supported Cortex XSOAR versions: 6.8.0 and later.
This playbook is used to initiate the processing of an incident. This playbook runs when a pending incident is selected for investigation. It will change the state from pending to active and it will list the available users in Vectra and request the user ID to use for assignment. Once the data collection is complete, it will call the Dispatch Incident - Vectra XDR playbook.
This playbook uses the following sub-playbooks, integrations, and scripts.
- Dispatch Incident - Vectra XDR
- Add Note - Vectra XDR
There are no inputs for this playbook.
There are no outputs for this playbook.