Reference

Cortex XSIAM reference material: cloud permissions, Windows auditing, XDM mapping, scanner licenses, and fair usage.

Cloud service provider permissionsMicrosoft Windows security auditing setupXDM fields for mapping authentication eventsCortex Network Scanner OSSFair Usage policy for Cortex XSIAM