Cloud workload rules

Use Cortex XSIAM cloud workload rules to define detection criteria for security violations and policy enforcement.

Cloud workload rules define the criteria for identifying security violations. These criteria can be applied to assets in your cloud environment and to findings generated by Cortex XSIAM.

Rules only enable the detection of security violations. They must be included in a policy to trigger a preventive response or to generate an alert as an issue.