Feature Enhancements

These enhancements provide new and improved capabilities.

General

FEATURE	DESCRIPTION
New forwarding integrations for cases and issues	Streamline issue and case management workflows by forwarding cases and issues to new destinations such as Splunk, Amazon SQS, Amazon S3, and Webhook, allowing you to manage investigations in external systems or meet strict data retention requirements.
FedRamp/Government Cloud support	For organizations in regulated industries (such as defense or public sector), you can now onboard and manage your cloud security posture for tenants operating in isolated Government Cloud environments (including AWS GovCloud, Azure Government, and Google Public Sector). This ensures you have full visibility, detection coverage, and compliance monitoring across all your segregated cloud partitions, allowing you to easily meet strict regulatory requirements.
Onboard Microsoft Azure using Terraform	You can now automate infrastructure provisioning and save deployment time by using Terraform to onboard Microsoft Azure tenant and management group scope cloud instances.
Autodetect Palo Alto Networks VM-Series firewalls	Gain deeper visibility and insights into your internet-exposed cloud assets with new automatic detection of VM-Series firewalls. This feature detects VM-Series firewalls deployed using Gateway Load Balancers (GWLB) in isolated mode on AWS.
Improved discovery and scanning for private Azure Container Registries (ACRs)	Cortex Cloud now provides complete visibility into all your Azure Container Registries by discovering and scanning the repositories and images in private ACRs. We enabled a new "Allow connection to private registries" toggle by default so the system can automatically create private links for successful scanning. The system then deletes these links immediately after to manage your resources efficiently and maintain security.
Asset-level rule configuration	Support for asset-based rules allows Exclusion, Starring, Scoring, and Playbook rules to be configured for specific asset objects, enabling tailored automation and notifications per account or asset group.