Case Mirroring (Beta)

Case Mirroring (Beta)

We have introduced the ability to sync cases from RedCarbon to your original source. This feature is currently in beta and does not support all integrations yet.

Enabling case mirroring allows you to sync the closed cases from RedCarbon to your original source. This feature is useful for organizations that want to keep their original source up-to-date with the latest information.

Supported Integrations

At the moment, we only support the following integrations:

  • Armis
  • Cynet 360
  • Google SecOps
  • Trend Micro
  • Fortinet EDR
  • Microsoft 365
  • Microsoft Sentinel
  • Palo Alto XDR

The following integrations are planned to be supported:

  • Splunk
  • QRadar
  • FortiSIEM

How to Use

  1. Navigate to the Customer section of the Organization Admin page.
  2. Select the integration that needs to be modified.
  3. If it is enabled needs to be disabled.
  4. Enable the mirroring feature in the menu on the right.

mirroring case

  1. Enable the integration

Please note that you need your integration to have read and write permissions to use this feature.