Hello,
we want to consolidate the Reason & Root Causes for closing Incidents for our complete Security Stack (XDR, SIEM, SOAR, ITSM…)
In order to do so we’ve created a custom List with new Reasons and Root Causes which I need to implement in SOAR.
As far as I can see I can edit and remove Root Causes in the SOAR settings but is it possible to have my own Reasons besides Malicious, Not Malicious….. integrated into SOAR for an Analysts or PB to choose from - except from custom fields which would create an additional field?
Best regards
Dominik
