Incident management
Real ticketing system: create, set status and close incidents. SOAR and the SIEM can open them automatically.
Open0
0
Critical / High
0
In progress
0
Closed
0
Incidents
Lifecycle: open → in progress → contained → closed
No incidents
Open an incident manually, or let SOAR create it automatically from an alert.