Hi experts,
We are using Pulse alerts to cancel long running threats. We want to exclude TIs that are run by an integration user from Python.
Can we use the ‘Filter’ & ‘Exclude’ feature for that? How this work or where do we find documetation?
Best regards,
Kevin