Datadog Cloud SIEM now connects triage and investigation in a single workflow, eliminating the need to switch between multiple tools. Analysts can view case context directly in the Signal Explorer, escalate signals into structured cases with auto-populated metadata, and manage the full investigation lifecycle within Datadog. Bidirectional syncing with Jira and ServiceNow keeps tickets in sync, while Slack thread replies are automatically added to case timelines. Automation rules can trigger case creation for high-severity signals and execute response workflows including remediation runbooks and custom agents.
Table of contents
See case context directly in Signal ExplorerEscalate signals into structured investigationsContinue investigations from the Cases workspaceCollaborate across ticketing and messaging systemsSpeed up case creation and response with automationConnect signals to investigations with a unified workflowSort: