Create Cases with Elastic Security Rule Alerts

Hello, thank you for your question. Yes, when you add a rule action you will see a 'Cases' connector. This will automatically open a case when the rule fires. You can read about it here: Cases connector and action | Kibana Guide [8.17] | Elastic

Quick note. This feature was introduced in 8.16 in Elastic Security in 'Technical Preview'. The documentation page shows it is still in Technical Preview, but it was actually fully released as of 8.17. We will update the docs.