How can a Cortex XSIAM engineer resolve the issue when a SOC analyst escalates missing...

When two incidents are merged in Cortex XSIAM, the War Room of the destination incident retains the merged details and activity logs. If a SOC analyst reports missing details, checking the destination incident’s War Room will provide the complete context and history.