Guillaume BOURGEOIS 0263619e30 feat(cortex-xdr): incident write-back and external alert push ...

Add three commands to the Cortex XDR integration (v1.2.0):
- update_incident: change status, severity, assignment and resolve
  comment on an incident (closes the SOAR ingest→action loop).
- insert_parsed_alerts: push external parsed alerts into Cortex XDR.
- insert_cef_alerts: push external CEF-format alerts.

Scripts follow the existing self-contained standard/advanced auth pattern.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-29 22:32:47 +02:00

..

incident-types

feat(integrations): declare default ingestion (command, mapper, default type)

2026-06-27 10:38:09 +02:00

mappers

feat(cortex-xdr): new Cortex XDR integration — incident ingestion + OCSF mapper, IR actions, standard/advanced auth

2026-06-26 15:28:43 +02:00

scripts

feat(cortex-xdr): incident write-back and external alert push

2026-06-29 22:32:47 +02:00

manifest.yaml

feat(cortex-xdr): incident write-back and external alert push

2026-06-29 22:32:47 +02:00