Security Incident Response AI agent collection close security incident agentic workflow

  • Release version: Yokohama
  • Updated February 25, 2025
  • 1 minute to read
  • The Close security incident agentic workflow enables security analysts to close a security incident.

    Close security incident agentic workflow overview

    Using the Close security incident agentic workflow, cancel the associated response tasks, generate resolution notes, close notes, close code and post incident analysis (PIA) during a security incident closure, and provide feedback and adjust content in natural language​ from the Now Assist panel.

    If you want to modify this agentic workflow, you can duplicate it, adjust the settings to suit your specific needs, and activate the duplicated version of the agentic workflow instead.

    Agent used in Close security incident agentic workflow

    The Security incident wrap-up generator expert is used in the Close security incident agentic workflow.