ExtraHop - Ticket Tracking Deprecated Hidden

Deprecated. Use the "ExtraHop - Ticket Tracking v2" playbook instead.\ \ Links the Demisto incident back to the ExtraHop detection that created it for ticket tracking purposes.

Deprecated Content (Deprecated) · 13 tasks · 1 input · 0 outputs

Inputs

  • OnCall — Set to true to assign only user that is currently on shift. Requires Cortex XSOAR v5.5 or later.

Commands used

extrahop-track-ticket setIncident

Flowchart

yes yes yes yes yes Start Start Track the incident status in ExtraHop Reveal(x) - extrahop-track-ticket Track the incident status... extrahop-track-ticket Done Done Mark the incident as tracked - setIncident Mark the incident as tracked setIncident Search for any untracked ExtraHop Detections - SearchIncidentsV2 Search for any untracked ... SearchIncidentsV2 Mark the incident as tracked - setIncident Mark the incident as tracked setIncident Track the incident status in ExtraHop Reveal(x) - extrahop-track-ticket Track the incident status... extrahop-track-ticket Are the required fields present? Are the required fields p... Were there any incidents found? Were there any incidents ... Was the incident successfully tracked? Was the incident successf... Was the incident successfully tracked? Was the incident successf... Assign an ExtraHop analyst to the incident - AssignAnalystToIncident Assign an ExtraHop analys... AssignAnalystToIncident Is ExtraHop Reveal(x) enabled? - Exists Is ExtraHop Reveal(x) ena... Exists