u/Sufficient-King5890

Hello, I am attempting to set my company up on NG-SIEM but I have had immense trouble finding how-to-guides so I decided to ask here.

I have a query from the old SIEM that I've added as a rule, and a workflow with the trigger on rule detection. However nothing seems to allow me to tie the two together other than creating a condition on the workflow and checking for detection display name which does not feel correct.

Does anyone know the correct way to accomplish this?