Investigate child tenant data

In multi-tenant environments, you can view, track, and investigate data across your Cortex XDR child tenants.

With Cortex XDR multi-tenancy, you can investigate the Cortex XDR child tenant data.

By default, Cortex XDR displays data for your tenant. To display data for your child tenant, select the tenant from the drop-down.

mssp-select-tenant.png

Some common tasks that you might perform include:

• Investigate incidents on a child tenant.
• Investigate alerts on a child tenant.