Greetings
Maybe I'm missing something but I've been trying to set up a automated flow where I would like a set of playbooks to be fired when an incident is closed with the classification "True Positive - Suspicious activity". In our workflow this is the only classification that isn't set by any other automation or playbook and I would like to use that classification to trigger other actions that are done manually today.
There seems to be the option of setting the incident status as a condition for an automation rule but not for the specific classification.
Can I perhaps solve this some other way in a logic app?
Peace
Fredrik
