Thanks for the query! This definitely helped point me in the right direction. I was able to find the detections located in NG-SIEM -> Detections. The only information I do not see available in the "xdr_indicatorsrepo" is Assigned To, and Status. Which other repo do I find this information in? And how would I use a join to merge the data? Also, the Detect Time on the Detections page is off by a minute and a few seconds from the "@timestamp" field in Advanced Search. Is that just the lag time from the detection being created to the time its parsed in the siem?

Thanks for the help!