Use an existing rule to create a new custom detection rule

Duplicate an existing rule and customize it for new detection needs.

1. Navigate to Posture Management → Rules & Policies → Rules → Cloud Workload.
2. In the Cloud Workload Rules page, click the policy you want to enable or disable.
3. In the Details page, click the More Options icon (⋮) and then select Save as new.
4. Modify the fields as required.
5. Click Create to create the new custom detection rule.