Offense escalations

When a QRadar offense is escalated, SOAR generates a detailed, case-specific response plan so that you can respond to cyberthreats faster and more efficiently.

The offense escalation and case creation process can be automated based on severity, type, or other criteria, or it can be manually triggered by an analyst.