I have created a custom connector in Google Secops SOAR but whenever the connector runs it re-creates even those cases which it has already created in previous run. How this could be avoided ?
Is there any way by which unique value of each event/alert can be matched to existing cases/alerts/events in SOAR ? What will be the optimized way to achieve this ?
LinkedIn
Twitter
