Cortex Toolbox
Kitlist Builder
Ingest Calculator
Content ▾
Packs
Integrations
Playbooks
Scripts
Incident Types
Incident Fields
Classifiers
Layouts
Parsing Rules
Correlation Rules
Modeling Rules
Reputation Commands
Threat Feeds
Docs ▾
Documentation
Analytics Alerts
XDM Explorer
Settings ▾
Show test playbooks
Show deprecated content
Sign in
Incident Fields
/ Follow Up
Follow Up
True if marked for follow up.
Common Types
boolean
Details
ID
incident_followup
CLI Name
followup
Type
boolean
Version
-1
Required
No
Read Only
No
Use as KPI
No
Searchable
Yes
Associated Incident Types
Qradar Generic