Install and configure content

Learn how content works in Cortex AgentiX.

Content is organized into content packs to support specific security orchestration use cases. Content packs can include multiple items such as actions, playbooks, scripts, dashboards, and widgets.

Cortex AgentiX includes AI system actions used by system agents. Some system actions are available out-of-the-box with pre-installed content packs, such as Common Scripts, and other system AI actions require you to download and install the relevant content pack.

To find and install additional content packs that include actions, go to Marketplace and select Content pack includes and Actions.

Content packs are either preinstalled or downloaded from one of the following:

• Data Sources

  On the Data Sources & Integrations page, when you add a data source, the Data Onboarder wizard guides you through the steps for installing the integration instance and enables you to configure your integration. Cortex AgentiX automatically downloads and installs the required content packs for the integration, and recommends additional beneficial content, such as playbooks and dashboards relevant to the specific data source.

  Use the Data Sources & Integrations page to configure content, which is designed for third-party integrations to help you onboard. For more information, see Add a new data source or instance.

• Marketplace

  In Marketplace, you can download, install, manage, and contribute content packs. For example, the Microsoft Exchange Online content pack includes scripts, integrations, and playbooks. After downloading the content pack, configure the integration on the Data Sources & Integrations page to enable Cortex AgentiX communication with the Exchange server.

  Content packs are created by Palo Alto Networks, technology partners, contributors, and customers. For more information about content packs, see Content packs.

  Not all content packs are available to download on the Data Sources page. If you require content packs such as Phishing and Malware, you need to download the pack from Marketplace and configure the integration.