Which Cortex XDR feature enables automated responses to certain threats?

Cortex XDR integrates with Cortex XSOAR (Security Orchestration, Automation, and Response) to enable automated responses to threats. When Cortex XDR generates an alert or an incident that meets specific criteria, it can trigger a corresponding playbook in XSOAR. A playbook is a predefined, automated workflow that executes a series of response actions, such as isolating an endpoint, quarantining files, or blocking malicious indicators on a firewall. This integration allows security teams to automate repetitive tasks, accelerate response times, and ensure consistent handling of security events without manual intervention.