> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/manage-global-bioc-rules.md).

# Manage Global BIOC Rules

Global BIOC rules are detection rules created by Cortex and distributed to the tenants. Cortex Cloud checks automatically for the latest update of global BIOC rules and applies them. If there are no new global BIOC rules, Cortex Cloud displays a content status of `Content up to date` next to the BIOC rules table heading. A dot to the left of the rule name indicates a global BIOC rule.

To see which rules are pushed by Palo Alto Networks, display the optional **Source** field.

<details>

<summary>Retrieve the latest global BIOC rules</summary>

1. Navigate to **Threat Management** → **Detection Rules** → **BIOC**.
2. To view the content details, hover over the status **Content up to date**, to show the global rules version number and the date the global rules were checked.

   The content status displays the date when the content was last updated, either automatically or manually by an administrator.
3. If the status displays **Could not check update**, click the status to check for updates manually.

   The last updated date changes when the download is successful.

</details>

<details>

<summary>Copy global BIOC rules</summary>

You cannot directly modify a global rule, but you can copy global rules to use as a template to create new rules.

1. Locate a Palo Alto Networks **Source** type rule, right-click and select **Save as New**.
2. Review and modify the BIOC properties.
3. Select **OK** to save the rule.

   The rule appears in the BIOC Rules table as a user-defined **Source** type rule that you can edit.

</details>

<details>

<summary>Add an exception to global BIOC rules</summary>

You cannot edit global rules, but you can add exceptions to the rule. For more information about rule exceptions, see Add a rule exception.Add an IOC or BIOC rule exception<br>

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security/threat-management/detection-rules/what-are-detection-rules/whats-a-bioc/manage-global-bioc-rules.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.