How to Create new case [from existing 2 cases with IOC or Combine 2 cases ] is it possible ?

  1. How create new cases based on information coming from multiple connectors, such as Mandiant and Exchange, with each connector providing different IOCs And then, within those cases, have specific playbooks run based on the IOCs pulled from each connector?

 

0 2 234
2 REPLIES 2