For the complete documentation index, see llms.txt. This page is also available as Markdown.
Cortex XDR 5.x

Investigation and Response permissions

Configure investigation and response permissions, which include search, response, and automation permissions.

Investigation and Response permissions are split as follows:

  • Search permissions: Query Library, Query Center, Forensics, Host Insights, and Graph Search.

  • Response permissions: Action Center, EDL, Agent Scripts Library, and Live Terminal.

  • Automation permissions: Playbooks, Scripts, Playground, and Automation Exclusion Center.

Last updated

Was this helpful?