We have Configured a User For CrowdStrike Falcon and after providing the necessary they are able to create incident in out instance.
Now the requirement is to create a Security Incident rather than a Normal Incident . For this I was planning to write a Before BR on incident table so that it won't create a Regular Incident .
But the thing is -Is this a good approach ? What could be another alternative?
And what other field we we need to set for creating a well security incident.
