Issue investigation actions

The following topics explain different actions you can take on issues in Cortex XSIAM.

* [copy-issues](issue-investigation-actions/copy-issues "mention")
* [analyze-an-issue](issue-investigation-actions/analyze-an-issue "mention")
* [update-issue-fields](issue-investigation-actions/update-issue-fields "mention")
* [query-case-and-issue-data](issue-investigation-actions/query-case-and-issue-data "mention")
* [exclude-an-issue](issue-investigation-actions/exclude-an-issue "mention")
* [create-a-featured-field](issue-investigation-actions/create-a-featured-field "mention")
* [export-issue-details-to-a-file](issue-investigation-actions/export-issue-details-to-a-file "mention")
* [investigate-contributing-events](issue-investigation-actions/investigate-contributing-events "mention")
* [retrieve-additional-issue-details](issue-investigation-actions/retrieve-additional-issue-details "mention")
* [view-generating-bioc-or-ioc-rule](issue-investigation-actions/view-generating-bioc-or-ioc-rule "mention")
* [create-profile-exceptions](issue-investigation-actions/create-profile-exceptions "mention")
* [add-a-file-path-to-a-malware-profile-allow-list](issue-investigation-actions/add-a-file-path-to-a-malware-profile-allow-list "mention")
* [close-an-issue](issue-investigation-actions/close-an-issue "mention")

Sub-topics

• Copy issues
• Analyze an issue
• Update issue fields
• Query case and issue data
• Exclude an issue
• Create a featured field
• Export issue details to a file
• Investigate contributing events
• Retrieve additional issue details
• View generating BIOC or IOC rule
• Create profile exceptions
• Add a file path to a malware profile allow list
• Close an issue