Analyze and resolve cases

The following sections explain how to review, analyze, and resolve cases in Cortex XSIAM. You can start reviewing the cases in your environment on the **Cases** page.

Sub-topics

• Review all cases
• Start case analysis
  • Agentic Assistant- Case Investigation agent
• Establish case context
  • AI-generated case summaries
  • Assess case severity and score
  • Update case attributes
• Analyze case details
  • Grouping graph
  • Evidence
  • Issue feed
  • Associated assets and artifacts
  • MITRE ATT&CK tactics and techniques
  • Compliance standards and controls
  • Case timeline
  • Detailed View
• Resolve the case
  • Resolution Center
  • Collaborative notes and comments
  • How to resolve a case
  • Resolution reasons for cases and issues
  • Monitor and track resolution times
  • Cortex Response and Remediation content pack
    • Investigate an issue using Cortex Response and Remediation playbooks
    • Example use cases
• Additional case actions
  • Create a case
  • Merge a case
  • Assign a case team and restrict access
    • Playbook examples
  • Unified case view