Customize your cases

Customize Cortex AgentiX cases with external threat intelligence integrations and verification sources.

External integrations

You can integrate external threat intelligence services with Cortex AgentiX that provide additional verification sources for each key artifact in a case. Cortex AgentiX supports the following integrations:

Cortex AgentiX threat intelligence integrations

Integration	Description
WildFire	Cortex AgentiX automatically includes WildFire threat intelligence in the case and issue investigation. WildFire detects known and unknown threats, such as malware. The WildFire verdict contains detailed insights into the behavior of identified threats. The WildFire verdict is displayed next to relevant Key Artifacts in the Cases page. See Review WildFire analysis details for more information.
VirusTotal	VirusTotal provides aggregated results from over 70 antivirus scanners, domain services included in the block list, and user contributions. The VirusTotal score is represented as a fraction. For example, a score of 34/52 means out of 52 queried services, 34 services determined the artifact to be malicious. To view VirusTotal threat intelligence in cases, you must obtain the license key for the service and add it to the Cortex AgentiX Configuration. When you add the service, the relevant VirusTotal (VT) score is displayed in the Cases page under Key Artifacts.