Exclude Integration User from Pulse Thread Cancelling

Hi experts,

We are using Pulse alerts to cancel long running threats. We want to exclude TIs that are run by an integration user from Python.

Can we use the ‘Filter’ & ‘Exclude’ feature for that? How this work or where do we find documetation?

Best regards,

Hi @kdekker,

You can test exclude by Context,


I think TM1Py has one setup too. You can test by running Bedrock’s Server Wait TI process for example.



1 Like