This workflow allows you to update an incident's properties. The primary use case for this workflow is incident automation rules. For example, you may want to create a rule that automatically assigns specific incidents to a group of people.

Target: Platform APIs

Steps:
- Check if any assignees were provided:
  - If there are assignees:
    - Split the assignees and then for each assignee:
      - Search for the user in XDR and, if the user is found, add their user ID to a running list
- Request the incident be updated

XDR - Automation Rule - Update Incident Properties