Skip to content

Add third-party block: Case Closure - #1229

Open
salvatoreasammito wants to merge 1 commit into
chronicle:mainfrom
salvatoreasammito:playbook/case_closure
Open

Add third-party block: Case Closure#1229
salvatoreasammito wants to merge 1 commit into
chronicle:mainfrom
salvatoreasammito:playbook/case_closure

Conversation

@salvatoreasammito

Copy link
Copy Markdown
Contributor

Summary

Adds a new third-party block for Case Closure.

Description

This block facilitates consistent case closure by requiring analysts to select an investigation outcome and provide closure comments. Based on the selected closure code, the workflow applies the appropriate classification and closes the case using predefined closure reasons and root causes.

Type of Contribution

  • Block

Validation

  • mp validate passed

Notes

  • No sensitive or internal data included.
  • Block tested in SOAR environment before submission.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant