> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/readme.md).

# Overview

Cortex XSOAR combines security orchestration, incident management, and interactive investigation into a seamless experience. The orchestration engine is designed to automate security product tasks and weave in human analyst tasks and workflows. Cortex XSOAR is powered by DBot, which learns from real life analyst interactions and past investigations to help SOC teams with analyst assignment suggestions, playbook enhancements, and best next steps for investigations. With Cortex XSOAR, security teams can build future proof security operations to reduce MTTR, create consistent and audited incident management process, and increase analyst productivity.

This guide is split into the following sections:

* [Get Started](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/get-started-in-cortex-xsoar.md)

  Understand Cortex XSOAR concepts, learn how to use the search, markdown, work with APIs, see how the CLI works.
* [Onboarding in Cortex XSOAR](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar.md)

  Get up and running in Cortex XSOAR, including installation, High Availability, disaster recovery, remote repositories, engines, user and role management.
* [Customize and Configure](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/customize-and-configure-cortex-xsoar.md)

  After you have set up Cortex XSOAR, you can start to configure and customize dataindicators, incidents, playbooks, dashboards. For example, customize out-of-the-box playbooks or build your own to match the workflows and integrations relevant for your organization
* [Day to Day Tasks](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/day-to-day-tasks-in-cortex-xsoar.md)

  This section deals with the common daily tasks in Cortex XSOAR, such as managing incidents, extracting and enriching indicators, and investigating and remediating security threats.
* [Reference](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/reference.md)

  View the server configurations, telemetry, management of audit logs, performance tuning, and keyboard shortcuts. Use this section as an easy way of finding information quickly.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/readme.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.