The Cortex XDR incident score is a numerical value from 0-100 designed to help analysts prioritize their work by indicating the potential risk of an incident. The score is influenced by two primary factors. First, the severity levels of the alerts within the incident are a key determinant, with the score being heavily weighted by the highest severity alert. Second, the number of correlated alerts that constitute the incident provides critical context about the scope and scale of the potential attack. A larger number of correlated alerts suggests a more widespread or persistent threat, which in turn influences the overall score and priority.
