When viewing the incident directly, what is the "assigned to" field value of a new Incident that was just reported to Cortex?

The correct answer is C. Unassigned. Assigned To: The user to which the incident is assigned. The assignee tracks which analyst is responsible for investigating the threat. Incidents that have not been assigned have a status of https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-

Submitted by ngozi_ng· Apr 18, 2026Detection and Alert Management

Question

Options

APending
BIt is blank
CUnassigned
DNew

How the community answered

(27 responses)

B
7% (2)
C
89% (24)
D
4% (1)

Explanation

Assigned To: The user to which the incident is assigned. The assignee tracks which analyst is responsible for investigating the threat. Incidents that have not been assigned have a status of https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-

Topics

#Incident Management#Default Incident Fields#Cortex XDR

Community Discussion

No community discussion yet for this question.

Full PCDRA Practice