ExtraHop - Ticket Tracking v2

Links the Demisto incident back to the ExtraHop detection that created it for ticket tracking purposes.

ExtraHop Reveal(x) · 13 tasks · 1 input · 0 outputs

Inputs

  • OnCall — Set to true to assign only user that is currently on shift. Requires Cortex XSOAR v5.5 or later.

Commands used

extrahop-ticket-track setIncident

Flowchart

yes yes yes yes yes Start Start Track the incident status in ExtraHop Reveal(x) - extrahop-ticket-track Track the incident status... extrahop-ticket-track Done Done Mark the incident as tracked - setIncident Mark the incident as tracked setIncident Search for any untracked ExtraHop Detections - SearchIncidentsV2 Search for any untracked ... SearchIncidentsV2 Mark the incident as tracked - setIncident Mark the incident as tracked setIncident Track the incident status in ExtraHop Reveal(x) - extrahop-ticket-track Track the incident status... extrahop-ticket-track Are the required fields present? Are the required fields p... Were there any incidents found? Were there any incidents ... Was the incident successfully tracked? Was the incident successf... Was the incident successfully tracked? Was the incident successf... Assign an ExtraHop analyst to the incident - AssignAnalystToIncident Assign an ExtraHop analys... AssignAnalystToIncident Is ExtraHop Reveal(x) enabled? - Exists Is ExtraHop Reveal(x) ena... Exists