This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
@Rafaeleite2 You can find grouping documentation here:
https://cloud.google.com/chronicle/docs/soar/investigate/working-with-alerts/alert-grouping-mechanism-admin
Together with grouping I would recommend you to use action "Find First
Alert" from "Too...
You can find the SOAR URL in any SOAR settings by looking at the URL to
which API requests are being sent in the DevTools of your browser. and
then as @TonyH mentioned above, you can add to it "swagger/index.html"
to load swagger:
@skadav , I'm sorry for the misunderstanding. You mentioned the Staging
and Production modes of IDE. Unfortunately, testing jobs there are not
fully supported (some of them may work in IDE, some of them won't). I
would recommend you to submit an FR t...
Could you please elaborate more on what you mean by there is no option
to create new job? Job creation should be available in all SOAR and
SecOps instances.
@bein this requires a playbook to be executed, and since a playbook can
be attached only to the specific case/alert you need a way to generate
it. In theory, it should be possible to achieve with custom development
or feature requests to have a Teams...
