Check Incydr Status and Close XSOAR Incident

Loops through open XSOAR incidents and closes incidents created from Incydr alerts that are now dismissed.

Code42 · 8 tasks · 2 inputs · 0 outputs

Inputs

  • incydr_id — The unique identifier of an Incydr alert from Code42 Incydr.
  • xsoar_id — The unique identifier of an XSOAR incident from Palo Alto XSOAR.

Commands used

closeInvestigation code42-alert-get

Flowchart

Yes Start Start Is the Incydr Alert Closed? Is the Incydr Alert Closed? Close Related XSOAR Incident - closeInvestigation Close Related XSOAR Incident closeInvestigation Playbook Complete Playbook Complete Check Status of Alert in Incydr - code42-alert-get Check Status of Alert in ... code42-alert-get Set "Closed XSOAR Incident" Log Message - Set Set "Closed XSOAR Inciden... Set Delete Status Key - DeleteContext Delete Status Key DeleteContext Set "No Action Taken" Log Message - Set Set "No Action Taken" Log... Set