Cortex XDR content

The type of content in Cortex XDR

In Cortex XDR, content includes individual content entities that you create such as individual playbooks and scripts, preinstalled content packs, and content packs that are downloaded from Marketplace when you adopt and edit playbooks.

Content packs are created by Palo Alto Networks and technology partners. Content in Marketplace is organized into content packs to support specific security orchestration use cases.

You can view your installed Marketplace content packs from within Cortex XDR.

In Cortex XDR, content includes the following:

Content	Description
Actions	Actions wrap diverse capabilities (such as playbooks, scripts, and commands) to make them accessible and executable by an agent.
Integrations	Integrations allow you to respond to events and perform actions on third-party security and alert management vendors.
Playbooks	You can automate many security processes, including handling investigations and managing tickets and security responses that were previously handled manually.
Scripts	Perform specific actions and are comprised of commands, which are used in playbook tasks and when running commands in the issue War Room.