This content pack contains the Cortex XDR Investigation and Response integration that enables direct execution of Cortex XDR actions within Cortex XSOAR.
This playbook allows you to view, create, update, or delete a ServiceNow ticket directly from Cortex XSOAR. It also enriches it with data and manages Security Incident Response (SIR) tickets.
When a ransomware attack is detected, Cortex XSOAR uses the Ransomware content pack to quickly and easily identify, investigate, and contain the ransomware attack.