Prisma Cloud Correlate Alerts v2

Search alerts in Prisma Cloud for a specific asset ID and, if present in Cortex XSOAR, link them.

Prisma Cloud by Palo Alto Networks · 12 tasks · 2 inputs · 2 outputs

Inputs

  • Prisma Cloud Attribution — Attribution information from Prisma Cloud.
  • Link Incidents — Link found Prisma Cloud incidents to current one?

Outputs

  • foundIncidents — Found Prisma Cloud Incidents
  • PrismaCloud.Alert — Prisma Cloud Alert

Commands used

linkIncidents prisma-cloud-alert-search

Flowchart

yes yes yes yes yes Start Start Prisma Cloud Alert Detection Prisma Cloud Alert Detection Are assets in Prisma Cloud found? Are assets in Prisma Clou... Done Prisma Cloud Alert Detection Done Prisma Cloud Alert D... Find Prisma Cloud Alerts for detected assets - prisma-cloud-alert-search Find Prisma Cloud Alerts ... prisma-cloud-alert-search Print Prisma Cloud Alerts - ToTable Print Prisma Cloud Alerts ToTable Find Prisma Cloud Incidents - SearchIncidentsV2 Find Prisma Cloud Incidents SearchIncidentsV2 Link Incidents - linkIncidents Link Incidents linkIncidents Prisma Cloud Alerts found? Prisma Cloud Alerts found? Are we linking found Prisma Cloud Incidents? Are we linking found Pris... Is Prisma Cloud enabled? Is Prisma Cloud enabled? Did we find any related Prisma Cloud incidents to link? Did we find any related P...